http://masui.net/pukiwiki/ modified by PANDA http://home.arino.jp/ */ class xpwiki_plugin_attach extends xpwiki_plugin { var $listed = FALSE; function plugin_attach_init () { // アップロード可能なファイルサイズ(php.iniから取得) $this->cont['PLUGIN_ATTACH_MAX_FILESIZE'] = $this->func->return_bytes(ini_get('upload_max_filesize')); // getini // 管理者だけが添付ファイルをアップロードできるようにする $this->cont['ATTACH_UPLOAD_ADMIN_ONLY'] = FALSE; // FALSE or TRUE // 管理者だけが ShockwaveFlash ファイルをアップロードできるようにする $this->cont['ATTACH_UPLOAD_FLASH_ADMIN_ONLY'] = FALSE; // ページ編集権限がある人のみ添付ファイルをアップロードできるようにする $this->cont['ATTACH_UPLOAD_EDITER_ONLY'] = TRUE; // FALSE or TRUE // ページオーナー権限がない場合にアップロードできる拡張子(カンマ区切り) // ATTACH_UPLOAD_EDITER_ONLY = FALSE のときに使用 $this->cont['ATTACH_UPLOAD_EXTENSION'] = 'jpg, jpeg, gif, png, txt, spch'; // ファイルの所有者チェックを行わない // チェックを行わないとアクセスできるすべての人がファイルを削除したりできます。 $this->cont['ATTACH_DISABLED_OWNER_CHECK'] = FALSE; // FALSE or TRUE // 管理者とページ作成者だけが添付ファイルを削除できるようにする $this->cont['ATTACH_DELETE_ADMIN_ONLY'] = FALSE; // FALSE or TRUE // 管理者とページ作成者が添付ファイルを削除するときは、バックアップを作らない $this->cont['ATTACH_DELETE_ADMIN_NOBACKUP'] = TRUE; // FALSE or TRUE // ゲストユーザーのアップロード/削除時にパスワードを要求する // (ADMIN_ONLYが優先 TRUE を強く奨励) $this->cont['ATTACH_PASSWORD_REQUIRE'] = TRUE; // FALSE or TRUE // 添付ファイル名を変更できるようにする $this->cont['PLUGIN_ATTACH_RENAME_ENABLE'] = TRUE; // FALSE or TRUE // ファイルのアクセス権 $this->cont['ATTACH_FILE_MODE'] = 0644; //define('ATTACH_FILE_MODE',0604); // for XREA.COM // イメージファイルのアクセス権 if (ini_get('safe_mode') == "1") { //セーフモード時はサムネイル作成と回転のためゲストに書き込み権限が必要 $this->cont['ATTACH_IMGFILE_MODE'] = 0606; } else { $this->cont['ATTACH_IMGFILE_MODE'] = $this->cont['ATTACH_FILE_MODE']; } // open 時にリファラをチェックする // 0:チェックしない, 1:未定義は許可, 2:未定義も不許可 // 未設定 = URL直打ち, ノートンなどでリファラを遮断 など。 //$this->cont['ATTACH_REFCHECK'] = 1; // この設定は pukiwiki.ini.php の $const['OPEN_MEDIA_REFCHECK'] へ変更した // file icon image if (!isset($this->cont['FILE_ICON'])) { $this->cont['FILE_ICON'] = 'file'; } // mime-typeを記述したページ $this->cont['ATTACH_CONFIG_PAGE_MIME'] = 'plugin/attach/mime-type'; // 詳細情報・ファイル一覧(イメージモード)で使用する ref プラグインの追加オプション $this->cont['ATTACH_CONFIG_REF_OPTION'] = ',noinline'; $this->cont['ATTACH_CONFIG_REF_OPTION_IMG'] = ',mw:160,mh:120'; // ref プラグインの添付リンクから呼び出された場合のサムネイル作成サイズ規定値(px) $this->cont['ATTACH_CONFIG_REF_THUMB'] = 240; // リスト表示する件数 $this->cont['ATTACH_LIST_MAX'] = 40; $this->cont['ATTACH_LIST_MAX_SKIN'] = 20; // tar $this->cont['TAR_HDR_LEN'] = 512; // ヘッダの大きさ $this->cont['TAR_BLK_LEN'] = 512; // 単位ブロック長さ $this->cont['TAR_HDR_NAME_OFFSET'] = 0; // ファイル名のオフセット $this->cont['TAR_HDR_NAME_LEN'] = 100; // ファイル名の最大長さ $this->cont['TAR_HDR_SIZE_OFFSET'] = 124; // サイズへのオフセット $this->cont['TAR_HDR_SIZE_LEN'] = 12; // サイズの長さ $this->cont['TAR_HDR_TYPE_OFFSET'] = 156; // ファイルタイプへのオフセット $this->cont['TAR_HDR_TYPE_LEN'] = 1; // ファイルタイプの長さ } function can_call_otherdir_convert() { return 1; } //-------- convert function plugin_attach_convert() { $this->converted = TRUE; if (!ini_get('file_uploads')) { return 'file_uploads disabled'; } $noattach = $nolist = $noform = $imglist = FALSE; $page = $this->root->vars['page']; // Render mode if ($page === '#RenderMode') { $page = $this->root->render_attach; $this->root->rtf['disable_render_cache'] = true; } if (func_num_args() > 0) { foreach (func_get_args() as $key => $arg) { if ($key === 0) { if ($this->func->is_page($arg)) { $page = $arg; continue; } } $arg = strtolower($arg); $nolist |= ($arg == 'nolist'); $noform |= ($arg == 'noform'); $noattach |= ($arg == 'noattach'); $imglist |= ($arg == 'imglist'); } } $ret = ''; if ($noattach) { $nolist = TRUE; $noform = TRUE; $this->listed = TRUE; } if (!$nolist) { if ($imglist) { $obj = new XpWikiAttachPages($this->xpwiki, $page, NULL, TRUE, 40, 0, FALSE, 'time', 'imglist'); } else { $obj = new XpWikiAttachPages($this->xpwiki, $page); } $ret .= $obj->toString($page, FALSE); $this->listed = TRUE; } if (!$noform) { $ret .= $this->attach_form($page); } return $ret; } //-------- action function plugin_attach_action() { // backward compatible if (array_key_exists('openfile',$this->root->vars)) { $this->root->vars['pcmd'] = 'open'; $this->root->vars['file'] = $this->root->vars['openfile']; } if (array_key_exists('delfile',$this->root->vars)) { $this->root->vars['pcmd'] = 'delete'; $this->root->vars['file'] = $this->root->vars['delfile']; } if (!isset($this->root->vars['refer']) && isset($this->root->vars['page'])) $this->root->vars['refer'] = $this->root->vars['page']; if (!isset($this->root->vars['refer'])) $this->root->vars['refer'] = ''; $age = array_key_exists('age',$this->root->vars) ? $this->root->vars['age'] : 0; $pcmd = array_key_exists('pcmd',$this->root->vars) ? $this->root->vars['pcmd'] : ''; if (empty($pcmd) && $this->root->vars['refer'] !== '' && $this->func->is_page($this->root->vars['refer'])) { if (empty($this->root->vars['docmd'])) { //ページが指定されていて pcmd がない時は 'upload' にする $pcmd = 'upload'; } else { $pcmd = 'nopcmd'; } } if ($this->root->vars['refer'] === '' && $pcmd === 'upload') { // ページ名の指定がない場合は list $pcmd = 'list'; } // iPhone, iPad で Picup 使用時 if ($pcmd === 'upload' && ! empty($this->root->vars['usr'])) { if ($uid = $this->func->cache_get_db($this->root->vars['usr'], 'attach:usr', true)) { if (is_numeric($uid)) { $uid = intval($uid); } else { $this->root->vars['pass'] = substr($uid, 4); $uid = 0; } $this->func->set_userinfo($uid); } $this->root->vars['refer'] = rawurldecode($this->root->vars['refer']); } // Authentication if ($this->root->vars['refer'] !== '') { if ($pcmd == 'upload') { //アップロード $check = $this->attachable($this->root->vars['refer']); if (isset($this->root->get['qqfile'])) { if (! $check) { $this->output_json($this->root->_attach_messages['err_noparm']); } $_file = array(); $_file['size'] = (isset($_SERVER['CONTENT_LENGTH']))? (int)$_SERVER['CONTENT_LENGTH'] : 0; if ($_file['size'] > $this->cont['PLUGIN_ATTACH_MAX_FILESIZE']) { $this->output_json($this->root->_attach_messages['err_exceed']); } file_put_contents(XOOPS_ROOT_PATH.'/cache/xpwiki_attach_dbg.txt', 'Time:'.time()."\n", FILE_APPEND);//@debug file_put_contents(XOOPS_ROOT_PATH.'/cache/xpwiki_attach_dbg.txt', 'Line:'.__LINE__."\n", FILE_APPEND);//@debug $real_size = 0; if ($_file['tmp_name'] = tempnam($this->cont['CACHE_DIR'], 'atf')) { if ($fp = fopen($_file['tmp_name'], 'wb')) { fseek($fp, 0, SEEK_SET); $input = fopen('php://input', 'rb'); $real_size = stream_copy_to_stream($input, $fp, $this->cont['PLUGIN_ATTACH_MAX_FILESIZE'] + 1); fclose($input); fclose($fp); } } file_put_contents(XOOPS_ROOT_PATH.'/cache/xpwiki_attach_dbg.txt', 'Line:'.__LINE__."\n", FILE_APPEND);//@debug if (! $real_size) { if ($_file['tmp_name']) @ unlink($_file['tmp_name']); $this->output_json('No files were uploaded.(Cache dirctory is not writable)'); } if ($real_size > $this->cont['PLUGIN_ATTACH_MAX_FILESIZE']) { if ($_file['tmp_name']) @ unlink($_file['tmp_name']); $this->output_json($this->root->_attach_messages['err_exceed']); } if ($_file['size'] && $real_size != $_file['size']){ if ($_file['tmp_name']) @ unlink($_file['tmp_name']); $this->output_json('No files were uploaded.(Upload error)'); } $_file['name'] = $this->root->get['qqfile']; $_file['not_files'] = true; $pass = (!empty($this->root->get['_pass'])) ? md5($this->root->get['_pass']) : NULL; $copyright = (isset($this->root->get['copyright']))? TRUE : FALSE; file_put_contents(XOOPS_ROOT_PATH.'/cache/xpwiki_attach_dbg.txt', 'Line:'.__LINE__."\n", FILE_APPEND);//@debug $ret = $this->attach_upload($_file, $this->root->vars['refer'], $pass, $copyright); file_put_contents(XOOPS_ROOT_PATH.'/cache/xpwiki_attach_dbg.txt', 'Line:'.__LINE__."\n", FILE_APPEND);//@debug if ($ret['result'] === FALSE) { @ unlink($_file['tmp_name']); $this->output_json($ret['msg']); } $this->output_json(0); // return success } // normal upload (non d&d) if (!$check) { $ret = array( 'result' => FALSE, 'msg' => $this->root->_attach_messages['err_noparm'] ); if (!empty($this->root->post['returi'])) { $ret['redirect'] = $this->root->siteinfo['host'].$this->root->post['returi']; } return $ret; } if (array_key_exists('attach_file',$_FILES)) { $pass = (!empty($this->root->vars['pass'])) ? md5($this->root->vars['pass']) : NULL; $copyright = (isset($this->root->post['copyright']))? TRUE : FALSE; if (is_array($_FILES['attach_file']['name'])) { for ($i = 0; $i < count($_FILES['attach_file']['name']); $i++) { if (! $_FILES['attach_file']['name'][$i]) continue; $_files = array(); foreach(array_keys($_FILES['attach_file']) as $_key) { $_files[$_key] = $_FILES['attach_file'][$_key][$i]; } $ret = $this->attach_upload($_files,$this->root->vars['refer'],$pass,$copyright); } } else { $ret = $this->attach_upload($_FILES['attach_file'],$this->root->vars['refer'],$pass,$copyright); } if (!empty($this->root->post['returi'])) { $ret['redirect'] = $this->root->siteinfo['host'].$this->root->post['returi']; $this->root->viewmode = 'normal'; // for target="_top" notset popup=1 in func->redirect_header() (ex. has refid) } return $ret; } } else { //その他 if (!$this->func->check_readable($this->root->vars['refer'])) return array('result'=>FALSE,'msg'=>$this->root->_attach_messages['err_noparm']); } } $pass = (!empty($this->root->vars['pass'])) ? $this->root->vars['pass'] : NULL; switch ($pcmd) { case 'info' : return $this->attach_info(); case 'delete' : return $this->attach_delete($pass); case 'open' : return $this->attach_open(); case 'list' : return $this->attach_list(); case 'imglist' : return $this->attach_list('imglist'); case 'freeze' : return $this->attach_freeze(TRUE,$pass); case 'unfreeze' : return $this->attach_freeze(FALSE,$pass); case 'rename' : return $this->attach_rename($pass); case 'upload' : return $this->attach_showform(); case 'copyright0': return $this->attach_copyright(FALSE, $pass); case 'copyright1': return $this->attach_copyright(TRUE, $pass); case 'rotate' : return $this->attach_rotate($pass); case 'noinline0' : return $this->attach_noinline('0', $pass); case 'noinline1' : return $this->attach_noinline('1', $pass); case 'noinline-1': return $this->attach_noinline('-1', $pass); case 'nopcmd' : return $this->attach_nopcmd(); case 'reinfo' : return $this->attach_reinfo(); case 'return' : return $this->attach_return(); } if (!isset($this->root->vars['page']) || !$this->func->is_page($this->root->vars['page'])) { return $this->attach_list(); } return false; } function attachable($page) { if ($this->cont['ATTACH_UPLOAD_ADMIN_ONLY']) { $check = $this->root->userinfo['admin']; } else { if ($this->cont['ATTACH_UPLOAD_EDITER_ONLY']) { $check = $this->func->check_editable($page, false, false); } else { $check = $this->func->check_readable($page, false, false); } } return $check; } //-------- call from skin function attach_filelist($isbn=false) { // global $vars,$_attach_messages; if ($this->listed) return ''; $obj = new XpWikiAttachPages($this->xpwiki, $this->root->vars['page'],0,$isbn,20); if ($obj->err === 1) return 'DB ERROR!: Please initialize an attach file database on an administrator screen.'; if (!array_key_exists($this->root->vars['page'],$obj->pages)) { return ''; } $_tmp = $obj->toString($this->root->vars['page'],TRUE); if ($_tmp) $_tmp = '' . $this->root->_attach_messages['msg_file'].': '.$_tmp."\n"; return $_tmp; } //-------- 実体 //ファイルアップロード function attach_upload($file,$page,$pass=NULL,$copyright=FALSE) { // $pass=NULL : パスワードが指定されていない // $pass=TRUE : アップロード許可 if ($file['tmp_name'] == '' or (empty($file['not_files']) && !is_uploaded_file($file['tmp_name'])) or !$file['size']) { return array('result'=>FALSE); } if (!$this->root->userinfo['uid'] && $this->cont['ATTACH_PASSWORD_REQUIRE'] && !$pass) { return array('result'=>FALSE,'msg'=>$this->root->_attach_messages['msg_require']); } if ($file['size'] > $this->cont['PLUGIN_ATTACH_MAX_FILESIZE']) { return array('result'=>FALSE,'msg'=>$this->root->_attach_messages['err_exceed']); } if (!$this->func->is_pagename($page) or ($pass !== TRUE and $this->cont['ATTACH_UPLOAD_EDITER_ONLY'] and !$this->func->is_editable($page))) { return array('result'=>FALSE,'msg'=>$this->root->_attach_messages['err_noparm']); } if ($this->cont['ATTACH_UPLOAD_ADMIN_ONLY'] and $pass !== TRUE and !$this->root->userinfo['admin']) { return array('result'=>FALSE,'msg'=>$this->root->_attach_messages['err_adminpass']); } //$copyright = (isset($post['copyright']))? TRUE : FALSE; $notouch = FALSE; // ページが無ければ空ページを作成 if (!$this->func->is_page($page)) { $this->func->make_empty_page($page, false); $notouch = TRUE; } else { list(, $etime) = $this->func->get_page_time_db($page); if (! $etime) $notouch = TRUE; } if ( strcasecmp(substr($file['name'],-4),".tar") == 0 && $this->root->post['untar_mode'] == "on" ) { // UploadされたTarアーカイブを展開添付する // Tarファイル展開 $etars = $this->untar( $file['tmp_name'], $this->cont['UPLOAD_DIR']); // 展開されたファイルを全てアップロードファイルとして追加 $enc = (strpos(strtolower($this->root->ua), 'windows') !== FALSE)? 'SJIS-WIN' : 'AUTO'; foreach ( $etars as $efile ) { $res = $this->do_upload( $page, mb_convert_encoding($efile['extname'], $this->cont['SOURCE_ENCODING'], $enc), $efile['tmpname'],$copyright,$pass,$notouch); if ( ! $res['result'] ) { unlink( $efile['tmpname']); } } // 最後の返り値でreturn return $res; } else { // 通常の単一ファイル添付処理 return $this->do_upload($page,$file['name'],$file['tmp_name'],$copyright,$pass,$notouch); } } function do_upload($page,$fname,$tmpname,$copyright=FALSE,$pass=NULL,$notouch=FALSE,$options=NULL) { // ページが無ければ空ページを作成(他のプラグインから呼ばれた時のため) if (!$this->func->is_page($page)) { $this->func->make_empty_page($page, false); } $overwrite = (!empty($options['overwrite'])); $changelog = (isset($options['changelog']))? $options['changelog'] : ''; // ファイル名の正規化 $fname = str_replace("\0", '', $fname); $fname = $this->func->basename(str_replace("\\","/",$fname)); $_action = 'insert'; // style.css if ($fname === 'style.css' && $this->func->is_owner($page)) { if ( is_uploaded_file($tmpname) ) { $_pagecss_file = $this->cont['CACHE_DIR'].$this->func->get_pgid_by_name($page).".css"; if (is_file($_pagecss_file)) unlink($_pagecss_file); if (move_uploaded_file($tmpname,$_pagecss_file)) { $this->attach_chmod($_pagecss_file); // 空のファイルの場合はファイル削除 if (!trim(file_get_contents($_pagecss_file))) { unlink($_pagecss_file); return array('result'=>TRUE,'msg'=>$this->root->_attach_messages['msg_unset_css']); } else { // 外部ファイルの参照を禁止するなどの書き換え $_data = file_get_contents($_pagecss_file); $_data = preg_replace('#(?:(ht|f)tps?://|boudary)#i', '',$_data); if ($fp = fopen($_pagecss_file,"wb")) { fputs($fp,$_data); fclose($fp); } return array('result'=>TRUE,'msg'=>$this->root->_attach_messages['msg_set_css']); } } else return array('result'=>FALSE,'msg'=>$this->root->_attach_messages['err_exists']); } } // ページオーナー権限がない場合は拡張子をチェック $allow_extensions = $this->get_allow_extensions(); if (empty($options['asSystem']) && !$overwrite && $allow_extensions && !$this->func->is_owner($page) && !preg_match("/\.(".join("|",$allow_extensions).")$/i",$fname)) { return array('result'=>FALSE,'msg'=>str_replace('$1',htmlspecialchars(preg_replace('/.*\.([^.]*)$/',"$1",$fname)),$this->root->_attach_messages['err_extension'])); } $_size = @ getimagesize($tmpname); // イメージファイルの内容をチェック if ($_size) { $checkStr = $this->func->file_get_contents($tmpname, FALSE, NULL, 0, 10240); if (preg_match('/<(?:script|\?php)/i', $checkStr)) { return array('result' => FALSE, 'msg' => 'It isn\'t a image file.'); } // Flashファイルの検査 if ($this->cont['ATTACH_UPLOAD_FLASH_ADMIN_ONLY']) { if (!$this->root->userinfo['admin'] && ($_size[2] === 4 || $_size[2] === 13)) { return array('result'=>FALSE,'msg'=>$this->root->_attach_messages['err_isflash']); } } } // オリジナルファイル名 $org_fname = $fname; // 格納ファイル名指定あり if (!empty($this->root->vars['filename'])) { $fname = $this->root->vars['filename']; } // 格納ファイル名文字数チェック(SQL varchar(255) - strlen('_\d\d\d')) $fname = (function_exists('mb_strcut'))? mb_strcut($fname, 0, 251) : substr($fname, 0, 251); // ファイル名 文字数のチェック $fname = $this->regularize_fname($fname, $page); if (!$overwrite) { // ファイル名が存在する場合は、数字を付け加える if (preg_match("/^(.+)(\.[^.]*)$/",$fname,$match)) { $_fname = $match[1]; $_ext = $match[2]; } else { $_fname = $fname; $_ext = ''; } $fi = 0; do { $obj = & new XpWikiAttachFile($this->xpwiki, $page, $fname); $fname = $_fname.'_'.($fi++).$_ext; } while ($obj->exist); } else { $obj = & new XpWikiAttachFile($this->xpwiki, $page, $fname); } if ( is_uploaded_file($tmpname) ) { if ($obj->exist) { return array('result'=>FALSE,'msg'=>$this->root->_attach_messages['err_exists']); } if (move_uploaded_file($tmpname,$obj->filename)) { $this->attach_chmod($obj->filename); } else { return array('result'=>FALSE,'msg'=>$this->root->_attach_messages['err_exists']); } } else { file_put_contents(XOOPS_ROOT_PATH.'/cache/xpwiki_attach_dbg.txt', 'Line:'.__LINE__."\n", FILE_APPEND);//@debug if (! is_file($tmpname) || ! filesize($tmpname)) { if (is_file($tmpname)) { unlink($tmpname); } return array('result'=>FALSE, 'msg'=>$this->root->_attach_messages['err_exists']); } if (is_file($obj->filename)) { unlink($obj->filename); $_action = "update"; } file_put_contents(XOOPS_ROOT_PATH.'/cache/xpwiki_attach_dbg.txt', 'Line:'.__LINE__."\n", FILE_APPEND);//@debug if (rename($tmpname,$obj->filename)) { file_put_contents(XOOPS_ROOT_PATH.'/cache/xpwiki_attach_dbg.txt', 'Line:'.__LINE__."\n", FILE_APPEND);//@debug $this->attach_chmod($obj->filename); } else { file_put_contents(XOOPS_ROOT_PATH.'/cache/xpwiki_attach_dbg.txt', 'Line:'.__LINE__."\n", FILE_APPEND);//@debug unlink($tmpname); return array('result'=>FALSE, 'msg'=>$this->root->_attach_messages['err_exists']); } } if ($this->func->is_page($page)) { if (!$notouch) { if (!$changelog) $changelog = 'Attached file: ' . htmlspecialchars($obj->file); $this->root->rtf['page_touch'][$page][] = $changelog; } $this->func->clear_page_cache($page); } if (! empty($options['asSystem'])) { $_uid = 0; $_ucd = 'SYSTEM'; $_uname = 'System'; $_admins = 0; } else { $_uid = $this->root->userinfo['uid']; $_ucd = $this->root->userinfo['ucd']; $_uname= $this->root->userinfo['uname']; $_admins = (int)$this->func->check_admin($this->root->userinfo['uid']); } file_put_contents(XOOPS_ROOT_PATH.'/cache/xpwiki_attach_dbg.txt', 'Line:'.__LINE__."\n", FILE_APPEND);//@debug $obj->getstatus(); $obj->status['age'] = 0; $obj->status['pass'] = ($pass !== TRUE and $pass !== NULL) ? $pass : ''; $obj->status['copyright'] = $copyright; $obj->status['owner'] = $_uid; $obj->status['ucd'] = $_ucd; $obj->status['uname'] = $_uname; $obj->status['md5'] = md5_file($obj->filename); $obj->status['admins'] = $_admins; $obj->status['org_fname'] = $org_fname; $obj->status['imagesize'] = $obj->getimagesize($obj->filename); $obj->status['mime'] = $this->attach_mime_content_type($obj->filename, $obj->status); $obj->action = $_action; $obj->putstatus(); if (!empty($this->root->vars['refid'])) { $this->ref_replace($page, $this->root->vars['refid'], $obj->file, $obj->status['imagesize']); } file_put_contents(XOOPS_ROOT_PATH.'/cache/xpwiki_attach_dbg.txt', 'Line:'.__LINE__."\n", FILE_APPEND);//@debug return array( 'result' => TRUE, 'msg' => $this->root->_attach_messages['msg_uploaded'], 'name' => $obj->file ); } function output_json($msg = 0, $page = '') { if (! $msg) { $this->func->send_json(array('success' => true)); } if (! $page) $page = $this->root->vars['refer']; $msg = str_replace('$1', $page, $msg); $msg = mb_convert_encoding($msg, 'UTF-8', $this->cont['SOURCE_ENCODING']); $this->func->send_json(array('error' => $msg)); } // ref プラグインのソース置換 function ref_replace($page, $refid, $name, $imagesize) { // サムネイルサイズ指定？ $prm = ''; if (!empty($this->root->vars['make_thumb']) && $imagesize) { if (!empty($this->root->vars['thumb_r'])) { $prm = ','.htmlspecialchars((int)$this->root->vars['thumb_r']).'%'; } else { if (!empty($this->root->vars['thumb_w'])) { $prm = ',mw:'.htmlspecialchars((int)$this->root->vars['thumb_w']); } if (!empty($this->root->vars['thumb_h'])) { $prm .= ',mh:'.htmlspecialchars((int)$this->root->vars['thumb_h']); } } } $_tmp = $postdata = $this->func->get_source($page); $postdata = preg_replace('/((?:&|#)ref)\(ID\$'.preg_quote($refid, '/').'((?:,[^\)]+)?\);?)/', "$1(".$name.$prm."$2", $postdata); if ($this->root->easy_ref_syntax) { $postdata = preg_replace('/\{\{ID\$'.preg_quote($refid, '/').'((?:,|\|).*?)?\}\}/', "{{".$name.$prm."$1}}", $postdata); } if ($_tmp !== $postdata) { $this->func->file_write($this->cont['DATA_DIR'], $page, join('', $postdata), TRUE); } } // ファイルアクセス権限を設定 function attach_chmod($file) { if (isset($this->cont['ATTACH_IMGFILE_MODE']) && @getimagesize($file)) { chmod($file, $this->cont['ATTACH_IMGFILE_MODE']); } else { chmod($file, $this->cont['ATTACH_FILE_MODE']); } } //詳細フォームを表示 function attach_info($err='') { // global $vars,$_attach_messages; foreach (array('refer','file','age') as $var) { $$var = array_key_exists($var,$this->root->vars) ? $this->root->vars[$var] : ''; } $obj = &new XpWikiAttachFile($this->xpwiki, $refer,$file,$age); return $obj->getstatus() ? $obj->info($err) : array('msg'=>$this->root->_attach_messages['err_notfound']); } //削除 function attach_delete($pass) { // global $vars,$_attach_messages; foreach (array('refer','file','age','pass') as $var) { $$var = array_key_exists($var,$this->root->vars) ? $this->root->vars[$var] : ''; } if ($this->cont['ATTACH_UPLOAD_EDITER_ONLY'] and !$this->func->is_editable($refer)) { return array('msg'=>$this->root->_attach_messages['err_noparm']); } $obj = &new XpWikiAttachFile($this->xpwiki, $refer,$file,$age); return $obj->getstatus() ? $obj->delete($pass) : array('msg'=>$this->root->_attach_messages['err_notfound']); } //凍結 function attach_freeze($freeze,$pass) { // global $vars,$_attach_messages; foreach (array('refer','file','age','pass') as $var) { $$var = array_key_exists($var,$this->root->vars) ? $this->root->vars[$var] : ''; } if ($this->cont['ATTACH_UPLOAD_EDITER_ONLY'] and !$this->func->is_editable($refer)) { return array('msg'=>$this->root->_attach_messages['err_noparm']); } $obj = &new XpWikiAttachFile($this->xpwiki, $refer,$file,$age); return $obj->getstatus() ? $obj->freeze($freeze,$pass) : array('msg'=>$this->root->_attach_messages['err_notfound']); } //イメージ回転 function attach_rotate($pass) { // global $vars,$_attach_messages; foreach (array('refer','file','age','pass','rd') as $var) { $$var = array_key_exists($var,$this->root->vars) ? $this->root->vars[$var] : ''; } if ($this->cont['ATTACH_UPLOAD_EDITER_ONLY'] and !$this->func->is_editable($refer)) { return array('msg'=>$this->root->_attach_messages['err_noparm']); } $rd = intval($rd); $obj = &new XpWikiAttachFile($this->xpwiki, $refer,$file,$age); return $obj->getstatus() ? $obj->rotate($rd,$pass) : array('msg'=>$this->root->_attach_messages['err_notfound']); } //著作権設定 function attach_copyright($copyright, $pass) { // global $vars,$_attach_messages; foreach (array('refer','file','age','pass') as $var) { $$var = array_key_exists($var,$this->root->vars) ? $this->root->vars[$var] : ''; } if ($this->cont['ATTACH_UPLOAD_EDITER_ONLY'] and !$this->func->is_editable($refer)) { return array('msg'=>$this->root->_attach_messages['err_noparm']); } $obj = &new XpWikiAttachFile($this->xpwiki, $refer,$file,$age); return $obj->getstatus() ? $obj->copyright($copyright,$pass) : array('msg'=>$this->root->_attach_messages['err_notfound']); } // リネーム function attach_rename($pass) { // global $vars, $_attach_messages; foreach (array('refer', 'file', 'age', 'pass', 'newname') as $var) { ${$var} = isset($this->root->vars[$var]) ? $this->root->vars[$var] : ''; } if ($this->func->is_freeze($refer) || ! $this->func->is_editable($refer)) { return array('msg'=>$this->root->_attach_messages['err_noparm']); } $obj = & new XpWikiAttachFile($this->xpwiki, $refer, $file, $age); if (! $obj->getstatus()) return array('msg'=>$this->root->_attach_messages['err_notfound']); return $obj->rename($pass, $newname); } // インラインコントロール function attach_noinline($noinline, $pass) { foreach (array('refer','file','age','pass') as $var) { $$var = array_key_exists($var,$this->root->vars) ? $this->root->vars[$var] : ''; } if ($this->cont['ATTACH_UPLOAD_EDITER_ONLY'] and !$this->func->is_editable($refer)) { return array('msg'=>$this->root->_attach_messages['err_noparm']); } $obj = &new XpWikiAttachFile($this->xpwiki, $refer,$file,$age); return $obj->getstatus() ? $obj->noinline($noinline,$pass) : array('msg'=>$this->root->_attach_messages['err_notfound']); } function attach_reinfo() { foreach (array('refer','file','age','pass') as $var) { $$var = array_key_exists($var,$this->root->vars) ? $this->root->vars[$var] : ''; } if ($this->cont['ATTACH_UPLOAD_EDITER_ONLY'] and !$this->func->is_editable($refer)) { return array('msg'=>$this->root->_attach_messages['err_noparm']); } $obj = &new XpWikiAttachFile($this->xpwiki, $refer,$file,$age); return $obj->reinfo(); } // pcmd が指定されていない function attach_nopcmd() { foreach (array('refer','file','age') as $var) { $$var = array_key_exists($var,$this->root->vars) ? $this->root->vars[$var] : ''; } $param = '&file='.rawurlencode($file).'&refer='.rawurlencode($refer). ($age ? '&age='.$age : ''); $redirect = "{$this->root->script}?plugin=attach&pcmd=info$param"; return array('msg'=>$this->root->_attach_messages['msg_nopcmd'],'redirect'=>$redirect); } //ダウンロード function attach_open() { // global $vars,$_attach_messages; foreach (array('refer','file','age') as $var) { $$var = array_key_exists($var,$this->root->vars) ? $this->root->vars[$var] : ''; } $obj = &new XpWikiAttachFile($this->xpwiki, $refer,$file,$age); return $obj->getstatus() ? $obj->open() : array('header' => 'HTTP/1.0 404 Not Found', 'msg' => 'File Not Found.'); } //一覧取得 function attach_list($mode="") { $refer = isset($this->root->vars['refer'])? $this->root->vars['refer'] : ''; $this->root->noattach = 1; $msg = $this->root->_attach_messages[($refer === '') ? 'msg_listall' : 'msg_listpage']; $max = ($refer !== '')? $this->cont['ATTACH_LIST_MAX'] : $this->cont['ATTACH_LIST_MAX_SKIN']; $max = (isset($this->root->vars['max']))? (int)$this->root->vars['max'] : $max; $max = min($this->cont['ATTACH_LIST_MAX'], $max); $start = (isset($this->root->vars['start']))? (int)$this->root->vars['start'] : 0; $start = max(0,$start); $f_order = (isset($this->root->vars['order']))? $this->root->vars['order'] : ""; $mode = ($mode == "imglist")? $mode : ""; $obj = new XpWikiAttachPages($this->xpwiki, $refer,NULL,TRUE,$max,$start,FALSE,$f_order,$mode); if ($refer !== '' && $this->func->is_page($refer) && $obj->err === 1) return array('msg'=>'DB ERROR!','body'=>'Please initialize an attach file database on an administrator screen.'); $body = ($refer === '' or array_key_exists($refer,$obj->pages)) ? $obj->toString($refer,FALSE) : "

".$this->func->make_pagelink($refer)."

\n".$this->root->_attach_messages['err_noexist']; return array('msg'=>$msg,'body'=>$body); } //アップロードフォームを表示 function attach_showform() { // global $vars; // global $_attach_messages; $this->root->vars['refer'] = $this->root->vars['page']; $body = ini_get('file_uploads') ? $this->attach_form($this->root->vars['page']) : 'file_uploads disabled.'; return array('msg'=>$this->root->_attach_messages['msg_upload'],'body'=>$body); } //-------- サービス //mime-typeの決定 function attach_mime_content_type($filename, $status) { $org_fname = $status['org_fname']; $imagesize = $status['imagesize']; $type = 'application/octet-stream'; //default if (!is_file($filename)) { return $type; } if (is_array($imagesize)) { if (isset($imagesize['mime'])) return $imagesize['mime']; // PHP >= 4.3.0 switch ($imagesize[2]) { case 1: return 'image/gif'; case 2: return 'image/jpeg'; case 3: return 'image/png'; case 4: case 13: return 'application/x-shockwave-flash'; } } $matches = array(); if (!preg_match('/_((?:[0-9A-F]{2})+)(?:\.\d+)?$/',$filename,$matches)) { return $type; } $filename = $org_fname; // mime-type一覧表を取得 $config = new XpWikiConfig($this->xpwiki, $this->cont['ATTACH_CONFIG_PAGE_MIME']); $table = $config->read() ? $config->get('mime-type') : array(); unset($config); // メモリ節約 foreach ($table as $row) { $_type = trim($row[0]); $exts = preg_split('/\s+|,/',trim($row[1]),-1,PREG_SPLIT_NO_EMPTY); foreach ($exts as $ext) { if (preg_match("/\.$ext$/i",$filename)) { return $_type; } } } return $type; } //アップロードフォーム function attach_form($page) { static $load = array(); //ページキャッシュは default プロファイルのみ $this->root->pagecache_profiles = 'default'; if ($this->cont['ATTACH_UPLOAD_EDITER_ONLY'] && ! $this->func->check_editable($page, false, false)) { return str_replace('$1', htmlspecialchars($page), $this->root->_attach_messages['msg_noupload']); } // Use fileuploader.js $use_fileuploader = ($this->cont['UA_PROFILE'] === 'default' && preg_match('/firefox|chrome|safari/i', $_SERVER['HTTP_USER_AGENT']) && function_exists('stream_copy_to_stream')); if (!isset($load[$this->xpwiki->pid])) {$load[$this->xpwiki->pid] = array();} $this->func->exist_plugin('attach'); if (isset($load[$this->xpwiki->pid][$page])) $load[$this->xpwiki->pid][$page]++; else $load[$this->xpwiki->pid][$page] = 0; $pgid = $this->func->get_pgid_by_name($page); // refid 指定 $_refid = (!empty($this->root->vars['refid']))? $this->root->vars['refid'] : ''; $refid = ($_refid)? '' : ''; $thumb_px = $this->cont['ATTACH_CONFIG_REF_THUMB']; $thumb = (!empty($this->root->vars['refid']) && !empty($this->root->vars['thumb']))? '

' . $this->root->_attach_messages['msg_make_thumb'].'
' . '  % or ' . 'W: x ' . 'H:(Max)

' : ''; $_filename = (!empty($this->root->vars['filename']))? $this->root->vars['filename'] : ''; $filename = ($_filename)? '' : ''; $r_page = rawurlencode($page); $s_page = htmlspecialchars($page); $is_popup = isset($this->root->vars['popup']); $target = ''; if ($is_popup) { if (empty($this->root->vars['returi'])) { if (! $use_fileuploader) { $this->root->vars['returi'] = $_SERVER['REQUEST_URI']; } } else { $target = ' target="_top"'; } } $_returi = (!empty($this->root->vars['returi']))? $this->root->vars['returi'] : ''; $returi = ($_returi)? '' : ''; $navi = ''; if (! $is_popup) { $navi = "

".str_replace('$1', $this->func->make_pagelink($page), $this->root->_attach_messages['msg_upload'])."

"; $navi .= << [{$this->root->_attach_messages['msg_list']}] [{$this->root->_attach_messages['msg_listall']}]
EOD; } if (!(bool)ini_get('file_uploads')) { return $navi; } // painter プラグイン 未実装 $painter = ''; if ($this->func->exist_plugin('painter')) { $picw = WIKI_PAINTER_DEF_WIDTH; $pich = WIKI_PAINTER_DEF_HEIGHT; //$picw = min($picw,WIKI_PAINTER_MAX_WIDTH_UPLOAD); //$pich = min($pich,WIKI_PAINTER_MAX_HEIGHT_UPLOAD); $script = $this->func->get_script_uri(); $painter='
'.$_attach_messages['msg_search_updata'].'
: '.$_attach_messages['msg_width'].' x '.$_attach_messages['msg_height'].' '.$_attach_messages['msg_max'].'('.WIKI_PAINTER_MAX_WIDTH_UPLOAD.' x '.WIKI_PAINTER_MAX_HEIGHT_UPLOAD.')

'.$_attach_messages['msg_adv_setting'].'
:
'; } $maxsize = $this->cont['PLUGIN_ATTACH_MAX_FILESIZE']; $msg_maxsize = sprintf($this->root->_attach_messages['msg_maxsize'],number_format($maxsize/1024)."KB"); $file_select = '
' . $this->root->_attach_messages['msg_file'] . ':
'; //$uid = get_pg_auther($this->page); $pass = ''; $_needpass = 0; $pass_title = ''; //if (ATTACH_PASSWORD_REQUIRE && !ATTACH_UPLOAD_ADMIN_ONLY && ((!$X_admin && $X_uid !== $uid) || $X_uid == 0)) if ($this->cont['ATTACH_PASSWORD_REQUIRE'] && !$this->cont['ATTACH_UPLOAD_ADMIN_ONLY'] && !$this->root->userinfo['uid']) { $pass_title = $this->root->_attach_messages[$this->cont['ATTACH_UPLOAD_ADMIN_ONLY'] ? 'msg_adminpass' : 'msg_password']; $pass = '
'.$pass_title.': '; $_needpass = 1; } $allow_extensions = $this->get_allow_extensions(); $_allow_extensions = '[]'; $antar_tag = "xpwiki->pid][$page]}\" name=\"untar_mode\">"; if ($allow_extensions && !$this->func->is_owner($page)) { //ex. ['jpg', 'jpeg', 'png', 'gif'] or [] $_allow_extensions = '[\'' . join('\', \'', $allow_extensions) . '\']'; $allow_extensions = str_replace('$1',join(", ",$allow_extensions),$this->root->_attach_messages['msg_extensions'])."
"; $antar_tag = ""; } else { $allow_extensions = ''; } //$filelist = "
".$this->attach_filelist(); $filelist = ''; $script = $this->func->get_script_uri(); // アップロードフォーム $form = <<
$refid $filename $returi $navi
$msg_maxsize
$allow_extensions $thumb $file_select
$pass
$antar_tag
EOD; if ($use_fileuploader) { // file-uploader $this->func->add_tag_head('attach.css'); $this->func->add_tag_head('fileuploader.js'); $_domid = $this->get_domid('fileuploader'); $form = <<