lib/functions.php

   1 <?php
   2 /*
   3  *  Jirafeau, your web file repository
   4  *  Copyright (C) 2008  Julien "axolotl" BERNARD <axolotl@magieeternelle.org>
   5  *  Copyright (C) 2012  Jerome Jutteau <j.jutteau@gmail.com>
   6  *
   7  *  This program is free software: you can redistribute it and/or modify
   8  *  it under the terms of the GNU Affero General Public License as
   9  *  published by the Free Software Foundation, either version 3 of the
  10  *  License, or (at your option) any later version.
  11  *
  12  *  This program is distributed in the hope that it will be useful,
  13  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15  *  GNU Affero General Public License for more details.
  16  *
  17  *  You should have received a copy of the GNU Affero General Public License
  18  *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
  19  */
  20
  21 /**
  22  * Transform a string in a path by seperating each letters by a '/'.
  23   * @return path finishing with a '/'
  24  */
  25 function
  26 s2p ($s)
  27 {
  28     $p = '';
  29     for ($i = 0; $i < strlen ($s); $i++)
  30         $p .= $s{$i} . '/';
  31     return $p;
  32 }
  33
  34 /**
  35  * Convert base 16 to base 64
  36  * @returns A string based on 64 characters (0-9, a-z, A-Z, "-" and "_")
  37  */
  38 function
  39 base_16_to_64 ($num)
  40 {
  41     $m = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ-_';
  42     $hex2bin = array ('0000', # 0
  43                       '0001', # 1
  44                       '0010', # 2
  45                       '0011', # 3
  46                       '0100', # 4
  47                       '0101', # 5
  48                       '0110', # 6
  49                       '0111', # 7
  50                       '1000', # 8
  51                       '1001', # 9
  52                       '1010', # a
  53                       '1011', # b
  54                       '1100', # c
  55                       '1101', # d
  56                       '1110', # e
  57                       '1111'); # f
  58     $o = '';
  59     $b = '';
  60     $i = 0;
  61     # Convert long hex string to bin.
  62     $size = strlen ($num);
  63     for ($i = 0; $i < $size; $i++)
  64         $b .= $hex2bin{hexdec ($num{$i})};
  65     # Convert long bin to base 64.
  66     $size *= 4;
  67     for ($i = $size - 6; $i >= 0; $i -= 6)
  68         $o = $m{bindec (substr ($b, $i, 6))} . $o;
  69     # Some few bits remaining ?
  70     if ($i < 0 && $i > -6)
  71         $o = $m{bindec (substr ($b, 0, $i + 6))} . $o;
  72     return $o;
  73 }
  74
  75 /**
  76   * Generate a random code.
  77   * @param $l code length
  78   * @return  random code.
  79   */
  80 function
  81 jirafeau_gen_random ($l)
  82 {
  83     if ($l <= 0)
  84         return 42;
  85
  86     $code="";
  87     for ($i = 0; $i < $l; $i++)
  88         $code .= dechex (rand (0, 15));
  89
  90     return $code;
  91 }
  92
  93 function is_ssl() {
  94     if ( isset($_SERVER['HTTPS']) ) {
  95         if ( 'on' == strtolower($_SERVER['HTTPS']) )
  96             return true;
  97         if ( '1' == $_SERVER['HTTPS'] )
  98             return true;
  99     } elseif ( isset($_SERVER['SERVER_PORT']) && ( '443' == $_SERVER['SERVER_PORT'] ) ) {
 100         return true;
 101     }
 102     return false;
 103 }
 104
 105 function
 106 jirafeau_human_size ($octets)
 107 {
 108     $u = array ('B', 'KB', 'MB', 'GB', 'TB');
 109     $o = max ($octets, 0);
 110     $p = min (floor (($o ? log ($o) : 0) / log (1024)), count ($u) - 1);
 111     $o /= pow (1024, $p);
 112     return round ($o, 1) . $u[$p];
 113 }
 114
 115 function
 116 jirafeau_clean_rm_link ($link)
 117 {
 118     $p = s2p ("$link");
 119     if (file_exists (VAR_LINKS . $p . $link))
 120         unlink (VAR_LINKS . $p . $link);
 121     $parse = VAR_LINKS . $p;
 122     $scan = array();
 123     while (file_exists ($parse)
 124            && ($scan = scandir ($parse))
 125            && count ($scan) == 2 // '.' and '..' folders => empty.
 126            && basename ($parse) != basename (VAR_LINKS))
 127     {
 128         rmdir ($parse);
 129         $parse = substr ($parse, 0, strlen($parse) - strlen(basename ($parse)) - 1);
 130     }
 131 }
 132
 133 function
 134 jirafeau_clean_rm_file ($md5)
 135 {
 136     $p = s2p ("$md5");
 137     $f = VAR_FILES . $p . $md5;
 138     if (file_exists ($f) && is_file ($f))
 139         unlink ($f);
 140     if (file_exists ($f . '_count') && is_file ($f . '_count'))
 141         unlink ($f . '_count');
 142     $parse = VAR_FILES . $p;
 143     $scan = array();
 144     while (file_exists ($parse)
 145            && ($scan = scandir ($parse))
 146            && count ($scan) == 2 // '.' and '..' folders => empty.
 147            && basename ($parse) != basename (VAR_FILES))
 148     {
 149         rmdir ($parse);
 150         $parse = substr ($parse, 0, strlen($parse) - strlen(basename ($parse)) - 1);
 151     }
 152 }
 153
 154 /**
 155  * transforms a php.ini string representing a value in an integer
 156  * @param $value the value from php.ini
 157  * @returns an integer for this value
 158  */
 159 function jirafeau_ini_to_bytes ($value)
 160 {
 161     $modifier = substr ($value, -1);
 162     $bytes = substr ($value, 0, -1);
 163     switch (strtoupper ($modifier))
 164     {
 165     case 'P':
 166         $bytes *= 1024;
 167     case 'T':
 168         $bytes *= 1024;
 169     case 'G':
 170         $bytes *= 1024;
 171     case 'M':
 172         $bytes *= 1024;
 173     case 'K':
 174         $bytes *= 1024;
 175     default:
 176         break;
 177     }
 178     return $bytes;
 179 }
 180
 181 /**
 182  * gets the maximum upload size according to php.ini
 183  * @returns the maximum upload size in bytes
 184  */
 185 function
 186 jirafeau_get_max_upload_size_bytes ()
 187 {
 188     return min (jirafeau_ini_to_bytes (ini_get ('post_max_size')),
 189                 jirafeau_ini_to_bytes (ini_get ('upload_max_filesize')));
 190 }
 191
 192 /**
 193  * gets the maximum upload size according to php.ini
 194  * @returns the maximum upload size string
 195  */
 196 function
 197 jirafeau_get_max_upload_size ()
 198 {
 199     return jirafeau_human_size(
 200             min (jirafeau_ini_to_bytes (ini_get ('post_max_size')),
 201                  jirafeau_ini_to_bytes (ini_get ('upload_max_filesize'))));
 202 }
 203
 204 /**
 205  * gets a string explaining the error
 206  * @param $code the error code
 207  * @returns a string explaining the error
 208  */
 209 function
 210 jirafeau_upload_errstr ($code)
 211 {
 212     switch ($code)
 213     {
 214     case UPLOAD_ERR_INI_SIZE:
 215     case UPLOAD_ERR_FORM_SIZE:
 216         return t('Your file exceeds the maximum authorized file size. ');
 217         break;
 218
 219     case UPLOAD_ERR_PARTIAL:
 220     case UPLOAD_ERR_NO_FILE:
 221         return
 222             t
 223             ('Your file was not uploaded correctly. You may succeed in retrying. ');
 224         break;
 225
 226     case UPLOAD_ERR_NO_TMP_DIR:
 227     case UPLOAD_ERR_CANT_WRITE:
 228     case UPLOAD_ERR_EXTENSION:
 229         return t('Internal error. You may not succeed in retrying. ');
 230         break;
 231
 232     default:
 233         break;
 234     }
 235     return t('Unknown error. ');
 236 }
 237
 238 /** Remove link and it's file
 239  * @param $link the link's name (hash)
 240  */
 241
 242 function
 243 jirafeau_delete_link ($link)
 244 {
 245     $l = jirafeau_get_link ($link);
 246     if (!count ($l))
 247         return;
 248
 249     jirafeau_clean_rm_link ($link);
 250
 251     $md5 = $l['md5'];
 252     $p = s2p ("$md5");
 253
 254     $counter = 1;
 255     if (file_exists (VAR_FILES . $p . $md5. '_count'))
 256     {
 257         $content = file (VAR_FILES . $p . $md5. '_count');
 258         $counter = trim ($content[0]);
 259     }
 260     $counter--;
 261
 262     if ($counter >= 1)
 263     {
 264         $handle = fopen (VAR_FILES . $p . $md5. '_count', 'w');
 265         fwrite ($handle, $counter);
 266         fclose ($handle);
 267     }
 268
 269     if ($counter == 0)
 270         jirafeau_clean_rm_file ($md5);
 271 }
 272
 273 /**
 274  * Delete a file and it's links.
 275  */
 276 function
 277 jirafeau_delete_file ($md5)
 278 {
 279     $count = 0;
 280     /* Get all links files. */
 281     $stack = array (VAR_LINKS);
 282     while (($d = array_shift ($stack)) && $d != NULL)
 283     {
 284         $dir = scandir ($d);
 285
 286         foreach ($dir as $node)
 287         {
 288             if (strcmp ($node, '.') == 0 || strcmp ($node, '..') == 0 ||
 289                 preg_match ('/\.tmp/i', "$node"))
 290                 continue;
 291
 292             if (is_dir ($d . $node))
 293             {
 294                 /* Push new found directory. */
 295                 $stack[] = $d . $node . '/';
 296             }
 297             elseif (is_file ($d . $node))
 298             {
 299                 /* Read link informations. */
 300                 $l = jirafeau_get_link (basename ($node));
 301                 if (!count ($l))
 302                     continue;
 303                 if ($l['md5'] == $md5)
 304                 {
 305                     $count++;
 306                     jirafeau_delete_link ($node);
 307                 }
 308             }
 309         }
 310     }
 311     jirafeau_clean_rm_file ($md5);
 312     return $count;
 313 }
 314
 315 /**
 316  * handles an uploaded file
 317  * @param $file the file struct given by $_FILE[]
 318  * @param $one_time_download is the file a one time download ?
 319  * @param $key if not empty, protect the file with this key
 320  * @param $time the time of validity of the file
 321  * @param $ip uploader's ip
 322  * @param $crypt boolean asking to crypt or not
 323  * @param $link_name_length size of the link name
 324  * @returns an array containing some information
 325  *   'error' => information on possible errors
 326  *   'link' => the link name of the uploaded file
 327  *   'delete_link' => the link code to delete file
 328  */
 329 function
 330 jirafeau_upload ($file, $one_time_download, $key, $time, $ip, $crypt, $link_name_length)
 331 {
 332     if (empty ($file['tmp_name']) || !is_uploaded_file ($file['tmp_name']))
 333     {
 334         return (array(
 335                  'error' =>
 336                    array ('has_error' => true,
 337                           'why' => jirafeau_upload_errstr ($file['error'])),
 338                  'link' => '',
 339                  'delete_link' => ''));
 340     }
 341
 342     /* array representing no error */
 343     $noerr = array ('has_error' => false, 'why' => '');
 344
 345     /* Crypt file if option is enabled. */
 346     $crypted = false;
 347     $crypt_key = '';
 348     if ($crypt == true && extension_loaded('mcrypt'))
 349     {
 350         $crypt_key = jirafeau_encrypt_file ($file['tmp_name'], $file['tmp_name']);
 351         if (strlen($crypt_key) > 0)
 352             $crypted = true;
 353     }
 354
 355     /* file informations */
 356     $md5 = md5_file ($file['tmp_name']);
 357     $name = str_replace (NL, '', trim ($file['name']));
 358     $mime_type = $file['type'];
 359     $size = $file['size'];
 360
 361     /* does file already exist ? */
 362     $rc = false;
 363     $p = s2p ("$md5");
 364     if (file_exists (VAR_FILES . $p .  $md5))
 365     {
 366         $rc = unlink ($file['tmp_name']);
 367     }
 368     elseif ((file_exists (VAR_FILES . $p) || @mkdir (VAR_FILES . $p, 0755, true))
 369             && move_uploaded_file ($file['tmp_name'], VAR_FILES . $p . $md5))
 370     {
 371         $rc = true;
 372     }
 373     if (!$rc)
 374     {
 375         return (array(
 376                  'error' =>
 377                    array ('has_error' => true,
 378                           'why' => t('Internal error during file creation.')),
 379                  'link' =>'',
 380                  'delete_link' => ''));
 381     }
 382
 383     /* Increment or create count file. */
 384     $counter = 0;
 385     if (file_exists (VAR_FILES . $p . $md5 . '_count'))
 386     {
 387         $content = file (VAR_FILES . $p . $md5. '_count');
 388         $counter = trim ($content[0]);
 389     }
 390     $counter++;
 391     $handle = fopen (VAR_FILES . $p . $md5. '_count', 'w');
 392     fwrite ($handle, $counter);
 393     fclose ($handle);
 394
 395     /* Create delete code. */
 396     $delete_link_code = jirafeau_gen_random (5);
 397
 398     /* md5 password or empty. */
 399     $password = '';
 400     if (!empty ($key))
 401         $password = md5 ($key);
 402
 403     /* create link file */
 404     $link_tmp_name =  VAR_LINKS . $md5 . rand (0, 10000) . '.tmp';
 405     $handle = fopen ($link_tmp_name, 'w');
 406     fwrite ($handle,
 407             $name . NL. $mime_type . NL. $size . NL. $password . NL. $time .
 408             NL . $md5. NL . ($one_time_download ? 'O' : 'R') . NL . date ('U') .
 409             NL . $ip . NL. $delete_link_code . NL . ($crypted ? 'C' : 'O'));
 410     fclose ($handle);
 411     $md5_link = substr(base_16_to_64 (md5_file ($link_tmp_name)), 0, $link_name_length);
 412     $l = s2p ("$md5_link");
 413     if (!@mkdir (VAR_LINKS . $l, 0755, true) ||
 414         !rename ($link_tmp_name,  VAR_LINKS . $l . $md5_link))
 415     {
 416         if (file_exists ($link_tmp_name))
 417             unlink ($link_tmp_name);
 418
 419         $counter--;
 420         if ($counter >= 1)
 421         {
 422             $handle = fopen (VAR_FILES . $p . $md5. '_count', 'w');
 423             fwrite ($handle, $counter);
 424             fclose ($handle);
 425         }
 426         else
 427         {
 428             jirafeau_clean_rm_file ($md5_link);
 429         }
 430         return (array(
 431                  'error' =>
 432                    array ('has_error' => true,
 433                           'why' => t('Internal error during file creation. ')),
 434                  'link' =>'',
 435                  'delete_link' => ''));
 436     }
 437    return (array ('error' => $noerr,
 438                   'link' => $md5_link,
 439                   'delete_link' => $delete_link_code,
 440                   'crypt_key' => $crypt_key));
 441 }
 442
 443 /**
 444  * tells if a mime-type is viewable in a browser
 445  * @param $mime the mime type
 446  * @returns a boolean telling if a mime type is viewable
 447  */
 448 function
 449 jirafeau_is_viewable ($mime)
 450 {
 451     if (!empty ($mime))
 452     {
 453         /* Actually, verify if mime-type is an image or a text. */
 454         $viewable = array ('image', 'text');
 455         $decomposed = explode ('/', $mime);
 456         return in_array ($decomposed[0], $viewable);
 457     }
 458     return false;
 459 }
 460
 461 // Error handling functions.
 462 //! Global array that contains all registered errors.
 463 $error_list = array ();
 464
 465 /**
 466  * Adds an error to the list of errors.
 467  * @param $title the error's title
 468  * @param $description is a human-friendly description of the problem.
 469  */
 470 function
 471 add_error ($title, $description)
 472 {
 473     global $error_list;
 474     $error_list[] = '<p>' . $title. '<br />' . $description. '</p>';
 475 }
 476
 477 /**
 478  * Informs whether any error has been registered yet.
 479  * @return true if there are errors.
 480  */
 481 function
 482 has_error ()
 483 {
 484     global $error_list;
 485     return !empty ($error_list);
 486 }
 487
 488 /**
 489  * Displays all the errors.
 490  */
 491 function
 492 show_errors ()
 493 {
 494     if (has_error ())
 495     {
 496         global $error_list;
 497         echo '<div class="error">';
 498         foreach ($error_list as $error)
 499         {
 500             echo $error;
 501         }
 502         echo '</div>';
 503     }
 504 }
 505
 506 function check_errors ($cfg)
 507 {
 508     if (file_exists (JIRAFEAU_ROOT . 'install.php')
 509         && !($cfg['installation_done'] === true))
 510     {
 511         header('Location: install.php');
 512         exit;
 513     }
 514
 515     /* check if the destination dirs are writable */
 516     $writable = is_writable (VAR_FILES) && is_writable (VAR_LINKS);
 517
 518     /* Checking for errors. */
 519     if (!is_writable (VAR_FILES))
 520         add_error (t('The file directory is not writable!'), VAR_FILES);
 521
 522     if (!is_writable (VAR_LINKS))
 523         add_error (t('The link directory is not writable!'), VAR_LINKS);
 524
 525     if (!is_writable (VAR_ASYNC))
 526         add_error (t('The async directory is not writable!'), VAR_ASYNC);
 527 }
 528
 529 /**
 530  * Read link informations
 531  * @return array containing informations.
 532  */
 533 function
 534 jirafeau_get_link ($hash)
 535 {
 536     $out = array ();
 537     $link = VAR_LINKS . s2p ("$hash") . $hash;
 538
 539     if (!file_exists ($link))
 540         return $out;
 541
 542     $c = file ($link);
 543     $out['file_name'] = trim ($c[0]);
 544     $out['mime_type'] = trim ($c[1]);
 545     $out['file_size'] = trim ($c[2]);
 546     $out['key'] = trim ($c[3], NL);
 547     $out['time'] = trim ($c[4]);
 548     $out['md5'] = trim ($c[5]);
 549     $out['onetime'] = trim ($c[6]);
 550     $out['upload_date'] = trim ($c[7]);
 551     $out['ip'] = trim ($c[8]);
 552     $out['link_code'] = trim ($c[9]);
 553     if (trim ($c[10]) == 'C')
 554             $out['crypted'] = true;
 555     else
 556             $out['crypted'] = false;
 557
 558     return $out;
 559 }
 560
 561 /**
 562  * List files in admin interface.
 563  */
 564 function
 565 jirafeau_admin_list ($name, $file_hash, $link_hash)
 566 {
 567     echo '<fieldset><legend>';
 568     if (!empty ($name))
 569         echo t('Filename') . ": $name ";
 570     if (!empty ($file_hash))
 571         echo t('file') . ": $file_hash ";
 572     if (!empty ($link_hash))
 573         echo t('link') . ": $link_hash ";
 574     if (empty ($name) && empty ($file_hash) && empty ($link_hash))
 575         echo t('List all files');
 576     echo '</legend>';
 577     echo '<table>';
 578     echo '<tr>';
 579     echo '<td>' . t('Filename') . '</td>';
 580     echo '<td>' . t('Type') . '</td>';
 581     echo '<td>' . t('Size') . '</td>';
 582     echo '<td>' . t('Expire') . '</td>';
 583     echo '<td>' . t('Onetime') . '</td>';
 584     echo '<td>' . t('Upload date') . '</td>';
 585     echo '<td>' . t('Origin') . '</td>';
 586     echo '<td>' . t('Action') . '</td>';
 587     echo '</tr>';
 588
 589     /* Get all links files. */
 590     $stack = array (VAR_LINKS);
 591     while (($d = array_shift ($stack)) && $d != NULL)
 592     {
 593         $dir = scandir ($d);
 594         foreach ($dir as $node)
 595         {
 596             if (strcmp ($node, '.') == 0 || strcmp ($node, '..') == 0 ||
 597                 preg_match ('/\.tmp/i', "$node"))
 598                 continue;
 599             if (is_dir ($d . $node))
 600             {
 601                 /* Push new found directory. */
 602                 $stack[] = $d . $node . '/';
 603             }
 604             elseif (is_file ($d . $node))
 605             {
 606                 /* Read link informations. */
 607                 $l = jirafeau_get_link ($node);
 608                 if (!count ($l))
 609                     continue;
 610
 611                 /* Filter. */
 612                 if (!empty ($name) && !preg_match ("/$name/i", $l['file_name']))
 613                     continue;
 614                 if (!empty ($file_hash) && $file_hash != $l['md5'])
 615                     continue;
 616                 if (!empty ($link_hash) && $link_hash != $node)
 617                     continue;
 618                 /* Print link informations. */
 619                 echo '<tr>';
 620                 echo '<td>' .
 621                 '<form action = "admin.php" method = "post">' .
 622                 '<input type = "hidden" name = "action" value = "download"/>' .
 623                 '<input type = "hidden" name = "link" value = "' . $node . '"/>' .
 624                 '<input type = "submit" value = "' . $l['file_name'] . '" />' .
 625                 '</form>';
 626                 echo '</td>';
 627                 echo '<td>' . $l['mime_type'] . '</td>';
 628                 echo '<td>' . jirafeau_human_size ($l['file_size']) . '</td>';
 629                 echo '<td>' . ($l['time'] == -1 ? '' : strftime ('%c', $l['time'])) .
 630                      '</td>';
 631                 echo '<td>' . $l['onetime'] . '</td>';
 632                 echo '<td>' . strftime ('%c', $l['upload_date']) . '</td>';
 633                 echo '<td>' . $l['ip'] . '</td>';
 634                 echo '<td>' .
 635                 '<form action = "admin.php" method = "post">' .
 636                 '<input type = "hidden" name = "action" value = "delete_link"/>' .
 637                 '<input type = "hidden" name = "link" value = "' . $node . '"/>' .
 638                 '<input type = "submit" value = "' . t('Del link') . '" />' .
 639                 '</form>' .
 640                 '<form action = "admin.php" method = "post">' .
 641                 '<input type = "hidden" name = "action" value = "delete_file"/>' .
 642                 '<input type = "hidden" name = "md5" value = "' . $l['md5'] . '"/>' .
 643                 '<input type = "submit" value = "' . t('Del file and links') . '" />' .
 644                 '</form>' .
 645                 '</td>';
 646                 echo '</tr>';
 647             }
 648         }
 649     }
 650     echo '</table></fieldset>';
 651 }
 652
 653 /**
 654  * Clean expired files.
 655  * @return number of cleaned files.
 656  */
 657 function
 658 jirafeau_admin_clean ()
 659 {
 660     $count = 0;
 661     /* Get all links files. */
 662     $stack = array (VAR_LINKS);
 663     while (($d = array_shift ($stack)) && $d != NULL)
 664     {
 665         $dir = scandir ($d);
 666
 667         foreach ($dir as $node)
 668         {
 669             if (strcmp ($node, '.') == 0 || strcmp ($node, '..') == 0 ||
 670                 preg_match ('/\.tmp/i', "$node"))
 671                 continue;
 672
 673             if (is_dir ($d . $node))
 674             {
 675                 /* Push new found directory. */
 676                 $stack[] = $d . $node . '/';
 677             }
 678             elseif (is_file ($d . $node))
 679             {
 680                 /* Read link informations. */
 681                 $l = jirafeau_get_link (basename ($node));
 682                 if (!count ($l))
 683                     continue;
 684                 $p = s2p ($l['md5']);
 685                 if ($l['time'] > 0 && $l['time'] < time () || // expired
 686                     !file_exists (VAR_FILES . $p . $l['md5']) || // invalid
 687                     !file_exists (VAR_FILES . $p . $l['md5'] . '_count')) // invalid
 688                 {
 689                     jirafeau_delete_link ($node);
 690                     $count++;
 691                 }
 692             }
 693         }
 694     }
 695     return $count;
 696 }
 697
 698
 699 /**
 700  * Clean old async transferts.
 701  * @return number of cleaned files.
 702  */
 703 function
 704 jirafeau_admin_clean_async ()
 705 {
 706     $count = 0;
 707     /* Get all links files. */
 708     $stack = array (VAR_ASYNC);
 709     while (($d = array_shift ($stack)) && $d != NULL)
 710     {
 711         $dir = scandir ($d);
 712
 713         foreach ($dir as $node)
 714         {
 715             if (strcmp ($node, '.') == 0 || strcmp ($node, '..') == 0 ||
 716                 preg_match ('/\.tmp/i', "$node"))
 717                 continue;
 718
 719             if (is_dir ($d . $node))
 720             {
 721                 /* Push new found directory. */
 722                 $stack[] = $d . $node . '/';
 723             }
 724             elseif (is_file ($d . $node))
 725             {
 726                 /* Read async informations. */
 727                 $a = jirafeau_get_async_ref (basename ($node));
 728                 if (!count ($a))
 729                     continue;
 730                 /* Delete transferts older than 1 hour. */
 731                 if (date ('U') - $a['last_edited'] > 3600)
 732                 {
 733                     jirafeau_async_delete (basename ($node));
 734                     $count++;
 735                 }
 736             }
 737         }
 738     }
 739     return $count;
 740 }
 741 /**
 742  * Read async transfert informations
 743  * @return array containing informations.
 744  */
 745 function
 746 jirafeau_get_async_ref ($ref)
 747 {
 748     $out = array ();
 749     $refinfos = VAR_ASYNC . s2p ("$ref") . "$ref";
 750
 751     if (!file_exists ($refinfos))
 752         return $out;
 753
 754     $c = file ($refinfos);
 755     $out['file_name'] = trim ($c[0]);
 756     $out['mime_type'] = trim ($c[1]);
 757     $out['key'] = trim ($c[2], NL);
 758     $out['time'] = trim ($c[3]);
 759     $out['onetime'] = trim ($c[4]);
 760     $out['ip'] = trim ($c[5]);
 761     $out['last_edited'] = trim ($c[6]);
 762     $out['next_code'] = trim ($c[7]);
 763     return $out;
 764 }
 765
 766 /**
 767  * Delete async transfert informations
 768   */
 769 function
 770 jirafeau_async_delete ($ref)
 771 {
 772     $p = s2p ("$ref");
 773     if (file_exists (VAR_ASYNC . $p . $ref))
 774         unlink (VAR_ASYNC . $p . $ref);
 775     if (file_exists (VAR_ASYNC . $p . $ref . '_data'))
 776         unlink (VAR_ASYNC . $p . $ref . '_data');
 777     $parse = VAR_ASYNC . $p;
 778     $scan = array();
 779     while (file_exists ($parse)
 780            && ($scan = scandir ($parse))
 781            && count ($scan) == 2 // '.' and '..' folders => empty.
 782            && basename ($parse) != basename (VAR_ASYNC))
 783     {
 784         rmdir ($parse);
 785         $parse = substr ($parse, 0, strlen($parse) - strlen(basename ($parse)) - 1);
 786     }
 787 }
 788
 789 /**
 790   * Init a new asynchronous upload.
 791   * @param $finename Name of the file to send
 792   * @param $one_time One time upload parameter
 793   * @param $key eventual password (or blank)
 794   * @param $time time limit
 795   * @param $ip ip address of the client
 796   * @return  a string containing a temporary reference followed by a code or the string "Error"
 797   */
 798 function
 799 jirafeau_async_init ($filename, $type, $one_time, $key, $time, $ip)
 800 {
 801     $res = 'Error';
 802
 803     /* Create temporary folder. */
 804     $ref;
 805     $p;
 806     $code = jirafeau_gen_random (4);
 807     do
 808     {
 809         $ref = jirafeau_gen_random (32);
 810         $p = VAR_ASYNC . s2p ($ref);
 811     } while (file_exists ($p));
 812     @mkdir ($p, 0755, true);
 813     if (!file_exists ($p))
 814     {
 815         echo "Error";
 816         return;
 817     }
 818
 819     /* md5 password or empty */
 820     $password = '';
 821     if (!empty ($key))
 822         $password = md5 ($key);
 823
 824     /* Store informations. */
 825     $p .= $ref;
 826     $handle = fopen ($p, 'w');
 827     fwrite ($handle,
 828             str_replace (NL, '', trim ($filename)) . NL .
 829             str_replace (NL, '', trim ($type)) . NL . $password . NL .
 830             $time . NL . ($one_time ? 'O' : 'R') . NL . $ip . NL .
 831             date ('U') . NL . $code . NL);
 832     fclose ($handle);
 833
 834     return $ref . NL . $code ;
 835 }
 836
 837 /**
 838   * Append a piece of file on the asynchronous upload.
 839   * @param $ref asynchronous upload reference
 840   * @param $file piece of data
 841   * @param $code client code for this operation
 842   * @return  a string containing a next code to use or the string "Error"
 843   */
 844 function
 845 jirafeau_async_push ($ref, $data, $code)
 846 {
 847     /* Get async infos. */
 848     $a = jirafeau_get_async_ref ($ref);
 849
 850     /* Check some errors. */
 851     if (count ($a) == 0
 852         || $a['next_code'] != "$code"
 853         || empty ($data['tmp_name'])
 854         || !is_uploaded_file ($data['tmp_name']))
 855         return "Error";
 856
 857     $p = s2p ($ref);
 858
 859     /* Concatenate data. */
 860     $r = fopen ($data['tmp_name'], 'r');
 861     $w = fopen (VAR_ASYNC . $p . $ref . '_data', 'a');
 862     while (!feof ($r))
 863     {
 864         if (fwrite ($w, fread ($r, 1024)) === false)
 865         {
 866             fclose ($r);
 867             fclose ($w);
 868             jirafeau_async_delete ($ref);
 869             return "Error";
 870         }
 871     }
 872     fclose ($r);
 873     fclose ($w);
 874     unlink ($data['tmp_name']);
 875
 876     /* Update async file. */
 877     $code = jirafeau_gen_random (4);
 878     $handle = fopen (VAR_ASYNC . $p . $ref, 'w');
 879     fwrite ($handle,
 880             $a['file_name'] . NL. $a['mime_type'] . NL. $a['key'] . NL .
 881             $a['time'] . NL . $a['onetime'] . NL . $a['ip'] . NL .
 882             date ('U') . NL . $code . NL);
 883     fclose ($handle);
 884     return $code;
 885 }
 886
 887 /**
 888   * Finalyze an asynchronous upload.
 889   * @param $ref asynchronous upload reference
 890   * @param $code client code for this operation
 891   * @param $crypt boolean asking to crypt or not
 892   * @param $link_name_length link name lenght
 893   * @return  a string containing the download reference followed by a delete code or the string "Error"
 894   */
 895 function
 896 jirafeau_async_end ($ref, $code, $crypt, $link_name_length)
 897 {
 898     /* Get async infos. */
 899     $a = jirafeau_get_async_ref ($ref);
 900     if (count ($a) == 0
 901         || $a['next_code'] != "$code")
 902         return "Error";
 903
 904     /* Generate link infos. */
 905     $p = VAR_ASYNC . s2p ($ref) . $ref . "_data";
 906     if (!file_exists($p))
 907         return "Error";
 908
 909     $crypted = false;
 910     $crypt_key = '';
 911     if ($crypt == true && extension_loaded('mcrypt'))
 912     {
 913         $crypt_key = jirafeau_encrypt_file ($p, $p);
 914         if (strlen($crypt_key) > 0)
 915             $crypted = true;
 916     }
 917
 918     $md5 = md5_file ($p);
 919     $size = filesize($p);
 920     $np = s2p ($md5);
 921     $delete_link_code = jirafeau_gen_random (5);
 922
 923     /* File already exist ? */
 924     if (!file_exists (VAR_FILES . $np))
 925         @mkdir (VAR_FILES . $np, 0755, true);
 926     if (!file_exists (VAR_FILES . $np . $md5))
 927         rename ($p, VAR_FILES . $np . $md5);
 928
 929     /* Increment or create count file. */
 930     $counter = 0;
 931     if (file_exists (VAR_FILES . $np . $md5 . '_count'))
 932     {
 933         $content = file (VAR_FILES . $np . $md5. '_count');
 934         $counter = trim ($content[0]);
 935     }
 936     $counter++;
 937     $handle = fopen (VAR_FILES . $np . $md5. '_count', 'w');
 938     fwrite ($handle, $counter);
 939     fclose ($handle);
 940
 941     /* Create link. */
 942     $link_tmp_name =  VAR_LINKS . $md5 . rand (0, 10000) . '.tmp';
 943     $handle = fopen ($link_tmp_name, 'w');
 944     fwrite ($handle,
 945             $a['file_name'] . NL . $a['mime_type'] . NL . $size . NL .
 946             $a['key'] . NL . $a['time'] . NL . $md5 . NL . $a['onetime'] . NL .
 947             date ('U') . NL . $a['ip'] . NL . $delete_link_code . NL . ($crypted ? 'C' : 'O'));
 948     fclose ($handle);
 949     $md5_link = substr(base_16_to_64 (md5_file ($link_tmp_name)), 0, $link_name_length);
 950     $l = s2p ("$md5_link");
 951     if (!@mkdir (VAR_LINKS . $l, 0755, true) ||
 952         !rename ($link_tmp_name,  VAR_LINKS . $l . $md5_link))
 953         echo "Error";
 954
 955     /* Clean async upload. */
 956     jirafeau_async_delete ($ref);
 957     return $md5_link . NL . $delete_link_code . NL . urlencode($crypt_key);
 958 }
 959
 960 function
 961 jirafeau_crypt_create_iv($base, $size)
 962 {
 963     $iv = '';
 964     while (strlen ($iv) < $size)
 965         $iv = $iv . $base;
 966     $iv = substr($iv, 0, $size);
 967     return $iv;
 968 }
 969
 970 /**
 971  * Crypt file and returns decrypt key.
 972  * @param $fp_src file path to the file to crypt.
 973  * @param $fp_dst file path to the file to write crypted file (could be the same).
 974  * @return decrypt key composed of the key and the iv separated by a point ('.')
 975  */
 976 function
 977 jirafeau_encrypt_file ($fp_src, $fp_dst)
 978 {
 979     $fs = filesize ($fp_src);
 980     if ($fs === false || $fs == 0 || !extension_loaded('mcrypt'))
 981         return '';
 982
 983     /* Prepare module. */
 984     $m = mcrypt_module_open('rijndael-256', '', 'ofb', '');
 985     /* Generate key. */
 986     $crypt_key = jirafeau_gen_random (10);
 987     $md5_key = md5($crypt_key);
 988     $iv = jirafeau_crypt_create_iv ($md5_key, mcrypt_enc_get_iv_size($m));
 989     /* Init module. */
 990     mcrypt_generic_init($m, $md5_key, $iv);
 991     /* Crypt file. */
 992     $r = fopen ($fp_src, 'r');
 993     $w = fopen ($fp_dst, 'c');
 994     while (!feof ($r))
 995     {
 996         $enc = mcrypt_generic($m, fread ($r, 1024));
 997         if (fwrite ($w, $enc) === false)
 998             return '';
 999     }
1000     fclose ($r);
1001     fclose ($w);
1002     /* Cleanup. */
1003     mcrypt_generic_deinit($m);
1004     mcrypt_module_close($m);
1005     return $crypt_key;
1006 }
1007
1008 /**
1009  * Decrypt file.
1010  * @param $fp_src file path to the file to decrypt.
1011  * @param $fp_dst file path to the file to write decrypted file (could be the same).
1012  * @param $k string composed of the key and the iv separated by a point ('.')
1013  * @return key used to decrypt. a string of length 0 is returned if failed.
1014  */
1015 function
1016 jirafeau_decrypt_file ($fp_src, $fp_dst, $k)
1017 {
1018     $fs = filesize ($fp_src);
1019     if ($fs === false || $fs == 0 || !extension_loaded('mcrypt'))
1020         return false;
1021
1022     /* Init module */
1023     $m = mcrypt_module_open('rijndael-256', '', 'ofb', '');
1024     /* Extract key and iv. */
1025     $crypt_key = $k;
1026     $md5_key = md5($crypt_key);
1027     $iv = jirafeau_crypt_create_iv ($md5_key, mcrypt_enc_get_iv_size($m));
1028     /* Decrypt file. */
1029     $r = fopen ($fp_src, 'r');
1030     $w = fopen ($fp_dst, 'c');
1031     while (!feof ($r))
1032     {
1033         $dec = mdecrypt_generic($m, fread ($r, 1024));
1034         if (fwrite ($w, $dec) === false)
1035             return false;
1036     }
1037     fclose ($r);
1038     fclose ($w);
1039     /* Cleanup. */
1040     mcrypt_generic_deinit($m);
1041     mcrypt_module_close($m);
1042     return true;
1043 }
1044
1045 /**
1046  * Check if Jirafeau is password protected for visitors.
1047  * @return true if Jirafeau is password protected, false otherwise.
1048  */
1049 function jirafeau_has_upload_password ($cfg)
1050 {
1051     return count ($cfg['upload_password']) > 0;
1052 }
1053
1054 /**
1055  * Challenge password for a visitor.
1056  * @param $password password to be challenged
1057  * @return true if password is valid, false otherwise.
1058  */
1059 function jirafeau_challenge_upload_password ($cfg, $password)
1060 {
1061     if (!jirafeau_has_upload_password($cfg))
1062         return false;
1063     forEach ($cfg['upload_password'] as $p)
1064         if ($password == $p)
1065             return true;
1066     error_log("password not found $password");
1067     return false;
1068 }
1069