diff options
Diffstat (limited to 'addon')
-rw-r--r-- | addon/java_upload/java_upload.php | 72 | ||||
-rw-r--r-- | addon/java_upload/jumploader_z.jar | bin | 0 -> 962772 bytes | |||
-rw-r--r-- | addon/js_upload/js_upload.php | 178 |
3 files changed, 209 insertions, 41 deletions
diff --git a/addon/java_upload/java_upload.php b/addon/java_upload/java_upload.php index 92cd5326e..8b8a57604 100644 --- a/addon/java_upload/java_upload.php +++ b/addon/java_upload/java_upload.php @@ -1,5 +1,77 @@ <?php +/** + * + * Java photo uploader, uses Jumploader + * + * WARNING: This module currently has privacy issues. + * The java package does not pass the permissions array intact and could lead to + * photos being seen by people that were excluded from seeing them. + * + */ + + +function java_upload_install() { + register_hook('photo_upload_form', 'addon/java_upload/java_upload.php', 'java_upload_form'); + register_hook('photo_post_init', 'addon/java_upload/java_upload.php', 'java_upload_post_init'); + register_hook('photo_post_end', 'addon/java_upload/java_upload.php', 'java_upload_post_end'); +} + + +function java_upload_uninstall() { + unregister_hook('photo_upload_form', 'addon/java_upload/java_upload.php', 'java_upload_form'); + unregister_hook('photo_post_init', 'addon/java_upload/java_upload.php', 'java_upload_post_init'); + unregister_hook('photo_post_end', 'addon/java_upload/java_upload.php', 'java_upload_post_end'); +} + + +function java_upload_form(&$a,&$b) { + + $uploadurl = $b['post_url']; + $sessid = session_id(); + $archive = $a->get_baseurl() . '/addon/java_upload/jumploader_z.jar'; + $filestext = t('Select files to upload: '); + + $nojava = t('Use the following controls only if the Java uploader [above] fails to launch.'); + + $b['default_upload'] = true; + + +$b['addon_text'] .= <<< EOT + + <div id="photos-upload-select-files-text">$filestext</div> + + <div id="photos_upload_applet_wrapper"> + <applet name="jumpLoaderApplet" + code="jmaster.jumploader.app.JumpLoaderApplet.class" + archive="$archive" + width="700" + height="600" + mayscript > + <param name="uc_uploadUrl" value="$uploadurl" /> + <param name="uc_uploadFormName" value="photos-upload-form" /> + <param name="gc_loggingLeveL" value="FATAL" /> + <param name="uc_fileParameterName" value="userfile" /> + <param name="uc_cookie" value="PHPSESSID=$sessid; path=/;" /> + <param name="vc_disableLocalFileSystem" value="false" /> + <param name="vc_uploadViewMenuBarVisible" value="false" /> + <param name="vc_mainViewFileListViewVisible" value="true" /> + <param name="vc_mainViewFileListViewHeightPercent" value="50" /> + <param name="vc_mainViewFileTreeViewVisible" value="true" /> + <param name="vc_mainViewFileTreeViewWidthPercent" value="35" /> + <param name="vc_lookAndFeel" value="system" /> + + </applet> + + </div> + + <div id="photos-upload-no-java-message" > + $nojava + </div> + +EOT; + +} diff --git a/addon/java_upload/jumploader_z.jar b/addon/java_upload/jumploader_z.jar Binary files differnew file mode 100644 index 000000000..30a85a33f --- /dev/null +++ b/addon/java_upload/jumploader_z.jar diff --git a/addon/js_upload/js_upload.php b/addon/js_upload/js_upload.php index 143f9ba33..dc2dc37dc 100644 --- a/addon/js_upload/js_upload.php +++ b/addon/js_upload/js_upload.php @@ -1,20 +1,98 @@ <?php +/** + * + * JavaScript Photo/Image Uploader + * + * Uses Valum 'qq' Uploader. + * Module Author: Chris Case + * + * Prior to enabling, ensure that you have a directory 'uploads' + * which is writable by the web server. + * + */ + function js_upload_install() { - register_hooks('photo_post_init', 'addon/js_upload/js_upload.php', 'js_upload_post_init'); - register_hooks('photo_post_file', 'addon/js_upload/js_upload.php', 'js_upload_post_file'); - register_hooks('photo_post_end', 'addon/js_upload/js_upload.php', 'js_upload_post_end'); + register_hook('photo_upload_form', 'addon/js_upload/js_upload.php', 'js_upload_form'); + register_hook('photo_post_init', 'addon/js_upload/js_upload.php', 'js_upload_post_init'); + register_hook('photo_post_file', 'addon/js_upload/js_upload.php', 'js_upload_post_file'); + register_hook('photo_post_end', 'addon/js_upload/js_upload.php', 'js_upload_post_end'); } function js_upload_uninstall() { - register_hooks('photo_post_init', 'addon/js_upload/js_upload.php', 'js_upload_post_init'); - register_hooks('photo_post_file', 'addon/js_upload/js_upload.php', 'js_upload_post_file'); - register_hooks('photo_post_end', 'addon/js_upload/js_upload.php', 'js_upload_post_end'); + unregister_hook('photo_upload_form', 'addon/js_upload/js_upload.php', 'js_upload_form'); + unregister_hook('photo_post_init', 'addon/js_upload/js_upload.php', 'js_upload_post_init'); + unregister_hook('photo_post_file', 'addon/js_upload/js_upload.php', 'js_upload_post_file'); + unregister_hook('photo_post_end', 'addon/js_upload/js_upload.php', 'js_upload_post_end'); +} + + +function js_upload_form(&$a,&$b) { + + $b['default_upload'] = false; + + $b['addon_text'] .= '<link href="' . $a->get_baseurl() . '/addon/js_upload/file-uploader/client/fileuploader.css" rel="stylesheet" type="text/css">'; + $b['addon_text'] .= '<script src="' . $a->get_baseurl() . '/addon/js_upload/file-uploader/client/fileuploader.js" type="text/javascript"></script>'; + + $b['addon_text'] .= <<< EOT + + <div id="file-uploader-demo1"> + <noscript> + <p>Please enable JavaScript to use file uploader.</p> + <!-- or put a simple form for upload here --> + </noscript> + </div> + +<script type="text/javascript"> +var uploader = null; +function getSelected(opt) { + var selected = new Array(); + var index = 0; + for (var intLoop = 0; intLoop < opt.length; intLoop++) { + if ((opt[intLoop].selected) || + (opt[intLoop].checked)) { + index = selected.length; + //selected[index] = new Object; + selected[index] = opt[intLoop].value; + //selected[index] = intLoop; + } + } + return selected; + } +function createUploader() { + uploader = new qq.FileUploader({ + element: document.getElementById('file-uploader-demo1'), + action: '{$b['post_url']}', + debug: true, + onSubmit: function(id,filename) { + + uploader.setParams( { + newalbum : document.getElementById('photos-upload-newalbum').value, + album : document.getElementById('photos-upload-album-select').value, + group_allow : getSelected(document.getElementById('group_allow')).join(','), + contact_allow : getSelected(document.getElementById('contact_allow')).join(','), + group_deny : getSelected(document.getElementById('group_deny')).join(','), + contact_deny : getSelected(document.getElementById('contact_deny')).join(',') + }); + } + }); } +// in your app create uploader as soon as the DOM is ready +// don't wait for the window to load +window.onload = createUploader; + + +</script> + +EOT; + + +} + function js_upload_post_init(&$a,&$b) { // list of valid extensions, ex. array("jpeg", "xml", "bmp") @@ -26,7 +104,9 @@ function js_upload_post_init(&$a,&$b) { $sizeLimit = 6 * 1024 * 1024; $uploader = new qqFileUploader($allowedExtensions, $sizeLimit); - $result = $uploader->handleUpload('uploads/'); + + $result = $uploader->handleUpload(); + // to pass data through iframe you will need to encode all html tags $a->data['upload_jsonresponse'] = htmlspecialchars(json_encode($result), ENT_NOQUOTES); @@ -36,22 +116,26 @@ function js_upload_post_init(&$a,&$b) { killme(); } + $a->data['upload_result'] = $result; } -function js_upload_photo_post_file(&$a,&$b) { +function js_upload_post_file(&$a,&$b) { + + $result = $a->data['upload_result']; - $b['src'] = 'uploads/'.$result['filename']; + $b['src'] = $result['path']; $b['filename'] = $result['filename']; - $b['filesize'] = filesize($src); + $b['filesize'] = filesize($b['src']); + } -function js_upload_photo_post_end(&$a,&$b) { +function js_upload_post_end(&$a,&$b) { +logger('upload_post_end'); if(x($a->data,'upload_jsonresponse')) { echo $a->data['upload_jsonresponse']; - @unlink($src); killme(); } @@ -62,30 +146,36 @@ function js_upload_photo_post_end(&$a,&$b) { * Handle file uploads via XMLHttpRequest */ class qqUploadedFileXhr { + + private $pathnm = ''; + /** - * Save the file to the specified path + * Save the file in the temp dir. * @return boolean TRUE on success */ - function save($path) { + function save() { $input = fopen("php://input", "r"); - $temp = tmpfile(); + $this->pathnm = tempnam(sys_get_temp_dir(),'frn'); + $temp = fopen($this->pathnm,"w"); $realSize = stream_copy_to_stream($input, $temp); + fclose($input); + fclose($temp); if ($realSize != $this->getSize()){ return false; } - - $target = fopen($path, "w"); - fseek($temp, 0, SEEK_SET); - stream_copy_to_stream($temp, $target); - fclose($target); - return true; } + + function getPath() { + return $this->pathnm; + } + function getName() { return $_GET['qqfile']; } + function getSize() { if (isset($_SERVER["CONTENT_LENGTH"])){ return (int)$_SERVER["CONTENT_LENGTH"]; @@ -98,17 +188,24 @@ class qqUploadedFileXhr { /** * Handle file uploads via regular form post (uses the $_FILES array) */ + class qqUploadedFileForm { + + /** * Save the file to the specified path * @return boolean TRUE on success */ - function save($path) { - if(!move_uploaded_file($_FILES['qqfile']['tmp_name'], $path)){ - return false; - } + + + function save() { return true; } + + function getPath() { + return $_FILES['qqfile']['tmp_name']; + } + function getName() { return $_FILES['qqfile']['name']; } @@ -116,6 +213,7 @@ class qqUploadedFileForm { return $_FILES['qqfile']['size']; } } + class qqFileUploader { private $allowedExtensions = array(); private $sizeLimit = 10485760; @@ -136,6 +234,7 @@ class qqFileUploader { } else { $this->file = false; } + } private function checkServerSettings(){ @@ -162,10 +261,7 @@ class qqFileUploader { /** * Returns array('success'=>true) or array('error'=>'error message') */ - function handleUpload($uploadDirectory, $replaceOldFile = FALSE){ - if (!is_writable($uploadDirectory)){ - return array('error' => t('Server error. Upload directory isn't writable.')); - } + function handleUpload(){ if (!$this->file){ return array('error' => t('No files were uploaded.')); @@ -192,7 +288,7 @@ class qqFileUploader { $pathinfo = pathinfo($this->file->getName()); $filename = $pathinfo['filename']; - //$filename = md5(uniqid()); + $ext = $pathinfo['extension']; if($this->allowedExtensions && !in_array(strtolower($ext), $this->allowedExtensions)){ @@ -200,18 +296,18 @@ class qqFileUploader { return array('error' => t('File has an invalid extension, it should be one of ') . $these . '.'); } - if(!$replaceOldFile){ - /// don't overwrite previous files that were uploaded - while (file_exists($uploadDirectory . $filename . '.' . $ext)) { - $filename .= rand(10, 99); - } - } - - if ($this->file->save($uploadDirectory . $filename . '.' . $ext)){ - return array('success'=>true,'filename' => $filename . '.' . $ext); + if ($this->file->save()){ + return array( + 'success'=>true, + 'path' => $this->file->getPath(), + 'filename' => $filename . '.' . $ext + ); } else { - return array('error'=> t('Could not save uploaded file.') . - t('The upload was cancelled, or server error encountered'),'filename' => $filename . '.' . $ext); + return array( + 'error'=> t('Upload was cancelled, or server error encountered'), + 'path' => $this->file->getPath(), + 'filename' => $filename . '.' . $ext + ); } } |