script.php

   1 <?php
   2 /*
   3  *  Jirafeau, your web file repository
   4  *  Copyright (C) 2015  Jerome Jutteau <j.jutteau@gmail.com>
   5  *
   6  *  This program is free software: you can redistribute it and/or modify
   7  *  it under the terms of the GNU Affero General Public License as
   8  *  published by the Free Software Foundation, either version 3 of the
   9  *  License, or (at your option) any later version.
  10  *
  11  *  This program is distributed in the hope that it will be useful,
  12  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  13  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14  *  GNU Affero General Public License for more details.
  15  *
  16  *  You should have received a copy of the GNU Affero General Public License
  17  *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
  18  */
  19
  20 /*
  21  * This file permits to easyly script file sending, receiving, deleting, ...
  22  * If you don't want this feature, you can simply delete this file from your
  23  * web directory.
  24  */
  25
  26 define ('JIRAFEAU_ROOT', dirname (__FILE__) . '/');
  27
  28 require (JIRAFEAU_ROOT . 'lib/config.original.php');
  29 require (JIRAFEAU_ROOT . 'lib/settings.php');
  30 require (JIRAFEAU_ROOT . 'lib/functions.php');
  31 require (JIRAFEAU_ROOT . 'lib/lang.php');
  32
  33  global $script_langages;
  34  $script_langages = array ('bash' => 'Bash');
  35
  36 /* Operations may take a long time.
  37  * Be sure PHP's safe mode is off.
  38  */
  39 @set_time_limit(0);
  40 /* Remove errors. */
  41 @error_reporting(0);
  42
  43 if ($_SERVER['REQUEST_METHOD'] == "GET" && count ($_GET) == 0)
  44 {
  45     require (JIRAFEAU_ROOT . 'lib/template/header.php');
  46     check_errors ($cfg);
  47     if (has_error ())
  48     {
  49         show_errors ();
  50         require (JIRAFEAU_ROOT . 'lib/template/footer.php');
  51         exit;
  52     }
  53     echo '<div class="info">';
  54     echo '<h2>' . t('Welcome to Jirafeau\'s query interface') . '</h2>';
  55     echo '<p>';
  56     echo t('This interface permits to script your uploads and downloads.') .
  57             ' ' . t('The instructions above show how to query this interface.');
  58     echo '</p>';
  59
  60     echo '<h3>' . t('Get Jirafeau\'s version') . ':</h3>';
  61     echo '<p>';
  62     echo t('Send a GET query to') . ': <i>' . $web_root . 'script.php</i><br />';
  63     echo '<br />';
  64     echo t('Parameters') . ':<br />';
  65     echo "<b>get_version=</b>1<i> (" . t('Required') . ")</i> <br />";
  66     echo '</p>';
  67     echo '<p>' . t('This will return brut text content.') . ' ' .
  68             t('First line is the version number.') . '<br /></p>';
  69     echo '<p>';
  70     echo t('Example') . ": <a href=\"" . $web_root . "script.php?get_version=1\">" . $web_root . "script.php?get_version=1</a> ";
  71     echo '</p>';
  72
  73     echo '<h3>' . t('Get server capacity') . ':</h3>';
  74     echo '<p>';
  75     echo t('Send a GET query to') . ': <i>' . $web_root . 'script.php</i><br />';
  76     echo '<br />';
  77     echo t('Parameters') . ':<br />';
  78     echo "<b>get_capacity=</b>1<i> (" . t('Required') . ")</i> <br />";
  79     echo '</p>';
  80     echo '<p>' . t('This will return brut text content.') . ' ' .
  81             t('First line is the server capacity (in Bytes).') . '<br /></p>';
  82     echo '<p>';
  83     echo t('Example') . ": <a href=\"" . $web_root . "script.php?get_capacity=1\">" . $web_root . "script.php?get_capacity=1</a> ";
  84     echo '</p>';
  85
  86     echo '<h3>' . t('Maximal allowed size of an uploaded file') . ':</h3>';
  87     echo '<p>';
  88     echo t('Send a GET query to') . ': <i>' . $web_root . 'script.php</i><br />';
  89     echo '<br />';
  90     echo t('Parameters') . ':<br />';
  91     echo "<b>get_maximal_upload_size=</b>1<i> (" . t('Required') . ")</i> <br />";
  92     echo '</p>';
  93     echo '<p>' . t('This will return brut text content.') . ' ' .
  94             t('First line returns size (in MB).') . '<br /></p>';
  95     echo '<p>';
  96     echo t('Example') . ": <a href=\"" . $web_root . "script.php?get_maximal_upload_size=1\">" . $web_root . "script.php?get_maximal_upload_size=1</a> ";
  97     echo '</p>';
  98
  99     echo '<h3>' . t('Upload a file') . ':</h3>';
 100     echo '<p>';
 101     echo t('Send a POST query to') . ': <i>' . $web_root . 'script.php</i><br />';
 102     echo '<br />';
 103     echo t('Parameters') . ':<br />';
 104     echo "<b>file=</b>C:\\your\\file\\path<i> (" . t('Required') . ")</i> <br />";
 105     echo "<b>time=</b>[minute|hour|day|week|month|year|none]<i> (" . t('Optional') . ', '. t('default: none') . ")</i> <br />";
 106     echo "<b>password=</b>your_password<i> (" . t('Optional') . ")</i> <br />";
 107     echo "<b>one_time_download=</b>1<i> (" . t('Optional') . ")</i> <br />";
 108     echo "<b>upload_password=</b>your_upload_password<i> (" . t('Optional') . ")</i> <br />";
 109     echo '</p>';
 110     echo '<p>' . t('This will return brut text content.') . ' ' .
 111          t('First line is the download reference and the second line the delete code.') . '<br /></p>';
 112
 113     echo '<h3>' . t('Get a file') . ':</h3>';
 114     echo '<p>';
 115     echo t('Send a GET query to') . ': <i>' . $web_root . 'script.php</i><br />';
 116     echo '<br />';
 117     echo t('Parameters') . ':<br />';
 118     echo "<b>h=</b>your_download_reference<i> (" . t('Required') . ")</i> <br />";
 119     echo '</p>';
 120     echo '<p>';
 121     echo t('If a password has been set, send a POST request with it.');
 122     echo '<br />';
 123     echo t('Parameters') . ':<br />';
 124     echo "<b>password=</b>your_password<i> (" . t('Optional') . ")</i> <br />";
 125     echo '</p>';
 126     echo '<p>';
 127     echo t('Example') . ": <a href=\"" . $web_root . "script.php?h=30ngy0hsDcpfrF8zR7x9iU\">" . $web_root . "script.php?h=30ngy0hsDcpfrF8zR7x9iU</a> ";
 128     echo '</p>';
 129
 130     echo '<h3>' . t('Delete a file') . ':</h3>';
 131     echo '<p>';
 132     echo t('Send a GET query to') . ': <i>' . $web_root . 'script.php</i><br />';
 133     echo '<br />';
 134     echo t('Parameters') . ':<br />';
 135     echo "<b>h=</b>your_download_reference<i> (" . t('Required') . ")</i> <br />";
 136     echo "<b>d=</b>yout_delete_code<i> (" . t('Required') . ")</i> <br />";
 137     echo '</p>';
 138     echo '<p>' . t('This will return "Ok" if succeeded, "Error" otherwhise.') . '<br /></p>';
 139     echo '<p>';
 140     echo t('Example') . ": <a href=\"" . $web_root . "script.php?h=30ngy0hsDcpfrF8zR7x9iU&amp;d=0d210a952\">" . $web_root . "script.php?h=30ngy0hsDcpfrF8zR7x9iU&amp;d=0d210a952</a> ";
 141     echo '</p>';
 142
 143     echo '<h3>' . t('Get a generated scripts') . ':</h3>';
 144     echo '<p>';
 145     echo t('Send a GET query to') . ': <i>' . $web_root . 'script.php</i><br />';
 146     echo '<br />';
 147     echo t('Parameters') . ':<br />';
 148     echo "<b>lang=</b>[";
 149     foreach ($script_langages as $lang => $name)
 150         echo $lang;
 151     echo "]<i> (" . t('Required') . ")</i> <br />";
 152     echo '</p>';
 153     echo '<p>' . t('This will return brut text content of the code.') . '<br /></p>';
 154     echo '<p>';
 155     echo t('Example') . ": <br />";
 156     foreach ($script_langages as $lang => $name)
 157         echo "$name: <a href=\"" . $web_root . "script.php?lang=$lang\">" . $web_root . "script.php?lang=$lang</a> ";
 158     echo '</p>';
 159
 160     echo '<h3>' . t('Initalize an asynchronous transfert') . ':</h3>';
 161     echo '<p>';
 162     echo t('The goal is to permit to transfert big file, chunk by chunk.') . ' ';
 163     echo t('Chunks of data must be sent in order.');
 164     echo '</p>';
 165     echo '<p>';
 166     echo t('Send a GET query to') . ': <i>' . $web_root . 'script.php?init_async</i><br />';
 167     echo '<br />';
 168     echo t('Parameters') . ':<br />';
 169     echo "<b>filename=</b>file_name.ext<i> (" . t('Required') . ")</i> <br />";
 170     echo "<b>type=</b>MIME_TYPE<i> (" . t('Optional') . ")</i> <br />";
 171     echo "<b>time=</b>[minute|hour|day|week|month|year|none]<i> (" . t('Optional') . ', '. t('default: none') . ")</i> <br />";
 172     echo "<b>password=</b>your_password<i> (" . t('Optional') . ")</i> <br />";
 173     echo "<b>one_time_download=</b>1<i> (" . t('Optional') . ")</i> <br />";
 174     echo "<b>upload_password=</b>your_upload_password<i> (" . t('Optional') . ")</i> <br />";
 175     echo '</p>';
 176     echo '<p>' . t('This will return brut text content.') . ' ' .
 177          t('First line is the asynchronous transfert reference and the second line the code to use in the next operation.') . '<br /></p>';
 178
 179     echo '<h3>' . t('Push data during asynchronous transfert') . ':</h3>';
 180     echo '<p>';
 181     echo t('Send a GET query to') . ': <i>' . $web_root . 'script.php?push_async</i><br />';
 182     echo '<br />';
 183     echo t('Parameters') . ':<br />';
 184     echo "<b>ref=</b>async_reference<i> (" . t('Required') . ")</i> <br />";
 185     echo "<b>data=</b>data_chunk<i> (" . t('Required') . ")</i> <br />";
 186     echo "<b>code=</b>last_provided_code<i> (" . t('Required') . ")</i> <br />";
 187     echo '</p>';
 188     echo '<p>' . t('This will return brut text content.') . ' ' .
 189          t('Returns the next code to use.') . '<br /></p>';
 190
 191     echo '<h3>' . t('Finalize asynchronous transfert') . ':</h3>';
 192     echo '<p>';
 193     echo t('Send a GET query to') . ': <i>' . $web_root . 'script.php?end_async</i><br />';
 194     echo '<br />';
 195     echo t('Parameters') . ':<br />';
 196     echo "<b>ref=</b>async_reference<i> (" . t('Required') . ")</i> <br />";
 197     echo "<b>code=</b>last_provided_code<i> (" . t('Required') . ")</i> <br />";
 198     echo '</p>';
 199     echo '<p>' . t('This will return brut text content.') . ' ' .
 200          t('First line is the download reference and the second line the delete code.') . '<br /></p>';
 201
 202     echo '</div><br />';
 203     require (JIRAFEAU_ROOT . 'lib/template/footer.php');
 204     exit;
 205 }
 206
 207 /* Lets use interface now. */
 208 header('Content-Type: text; charset=utf-8');
 209
 210 check_errors ($cfg);
 211 if (has_error ())
 212 {
 213     echo "Error";
 214     exit;
 215 }
 216
 217 /* Upload file */
 218 if (isset ($_FILES['file']) && is_writable (VAR_FILES)
 219     && is_writable (VAR_LINKS))
 220 {
 221     if (jirafeau_has_upload_password ($cfg) &&
 222          (!isset ($_POST['upload_password']) ||
 223           !jirafeau_challenge_upload_password ($cfg, $_POST['upload_password'])))
 224     {
 225         echo "Error";
 226         exit;
 227     }
 228
 229     $key = '';
 230     if (isset ($_POST['key']))
 231         $key = $_POST['key'];
 232
 233     $time = time ();
 234     if (!isset ($_POST['time']) || !$cfg['availabilities'][$_POST['time']])
 235     {
 236         echo "Error";
 237         exit;
 238     }
 239     else
 240         switch ($_POST['time'])
 241         {
 242             case 'minute':
 243                 $time += JIRAFEAU_MINUTE;
 244                 break;
 245             case 'hour':
 246                 $time += JIRAFEAU_HOUR;
 247                 break;
 248             case 'day':
 249                 $time += JIRAFEAU_DAY;
 250                 break;
 251             case 'week':
 252                 $time += JIRAFEAU_WEEK;
 253                 break;
 254             case 'month':
 255                 $time += JIRAFEAU_MONTH;
 256                 break;
 257             case 'year':
 258                 $time += JIRAFEAU_YEAR;
 259                 break;
 260            default:
 261                 $time = JIRAFEAU_INFINITY;
 262                 break;
 263         }
 264
 265     // Check file size
 266     if ($cfg['maximal_upload_size'] > 0 &&
 267         $_FILES['file']['size'] > $cfg['maximal_upload_size'] * 1024 * 1024)
 268     {
 269         echo "Error";
 270         exit;
 271     }
 272
 273     $res = jirafeau_upload ($_FILES['file'],
 274                             isset ($_POST['one_time_download']),
 275                             $key, $time, $_SERVER['REMOTE_ADDR'],
 276                             $cfg['enable_crypt'], $cfg['link_name_length']);
 277
 278     if (empty($res) || $res['error']['has_error'])
 279     {
 280         echo "Error";
 281         exit;
 282     }
 283     /* Print direct link. */
 284     echo $res['link'];
 285     /* Print delete link. */
 286     echo NL;
 287     echo $res['delete_link'];
 288     /* Print decrypt key. */
 289     echo NL;
 290     echo urlencode($res['crypt_key']);
 291 }
 292 elseif (isset ($_GET['h']))
 293 {
 294     $link_name = $_GET['h'];
 295     $key = '';
 296     if (isset ($_POST['key']))
 297         $key = $_POST['key'];
 298     $d = '';
 299     if (isset ($_GET['d']))
 300         $d = $_GET['d'];
 301
 302     if (!preg_match ('/[0-9a-zA-Z_-]+$/', $link_name))
 303     {
 304         echo "Error";
 305         exit;
 306     }
 307
 308     $link = jirafeau_get_link ($link_name);
 309     if (count ($link) == 0)
 310     {
 311         echo "Error";
 312         exit;
 313     }
 314     if (strlen ($d) > 0 && $d == $link['link_code'])
 315     {
 316         jirafeau_delete_link ($link_name);
 317         echo "Ok";
 318         exit;
 319     }
 320     if ($link['time'] != JIRAFEAU_INFINITY && time () > $link['time'])
 321     {
 322         jirafeau_delete_link ($link_name);
 323         echo "Error";
 324         exit;
 325     }
 326     if (strlen ($link['key']) > 0 && md5 ($key) != $link['key'])
 327     {
 328         echo "Error";
 329         exit;
 330     }
 331     $p = s2p ($link['md5']);
 332     if (!file_exists (VAR_FILES . $p . $link['md5']))
 333     {
 334         echo "Error";
 335         exit;
 336     }
 337
 338     /* Read file. */
 339     header ('Content-Length: ' . $link['file_size']);
 340     header ('Content-Type: ' . $link['mime_type']);
 341     header ('Content-Disposition: attachment; filename="' .
 342             $link['file_name'] . '"');
 343
 344     $r = fopen (VAR_FILES . $p . $link['md5'], 'r');
 345     while (!feof ($r))
 346     {
 347         print fread ($r, 1024);
 348         ob_flush();
 349     }
 350     fclose ($r);
 351
 352     if ($link['onetime'] == 'O')
 353         jirafeau_delete_link ($link_name);
 354     exit;
 355 }
 356 elseif (isset ($_GET['get_capacity']))
 357 {
 358     echo min (jirafeau_ini_to_bytes (ini_get ('post_max_size')),
 359               jirafeau_ini_to_bytes (ini_get ('upload_max_filesize')));
 360 }
 361 elseif (isset ($_GET['get_maximal_upload_size']))
 362 {
 363     echo $cfg['maximal_upload_size'];
 364 }
 365 elseif (isset ($_GET['get_version']))
 366 {
 367     echo JIRAFEAU_VERSION;
 368 }
 369 elseif (isset ($_GET['lang']))
 370 {
 371     $l=$_GET['lang'];
 372     if ($l == "bash")
 373     {
 374 ?>
 375 #!/bin/bash
 376
 377 # This script has been auto-generated by Jirafeau but you can still edit
 378 # options below.
 379
 380 # Config
 381 proxy='' # ex: proxy='proxysever.test.com:3128' or set JIRAFEAU_PROXY global variable
 382 url='<?php echo $cfg['web_root'] . 'script.php'; ?>' # or set JIRAFEAU_URL ex: url='http://mysite/jirafeau/script.php'
 383 time='none' # minute, hour, day, week, month, year or none. Or set JIRAFEAU_TIME.
 384 one_time='' # ex: one_time="1" or set JIRAFEAU_ONE_TIME.
 385 curl='' # curl path to download or set JIRAFEAU_CURL_PATH.
 386 # End of config
 387
 388 if [ -n "$JIRAFEAU_PROXY" ]; then
 389     proxy="$JIRAFEAU_PROXY"
 390 fi
 391
 392 if [ -n "$JIRAFEAU_URL" ]; then
 393     url="$JIRAFEAU_URL"
 394 fi
 395
 396 if [ -z "$url" ]; then
 397     echo "Please set url in script parameters or export JIRAFEAU_URL"
 398 fi
 399
 400 if [ -n "$JIRAFEAU_TIME" ]; then
 401     time="$JIRAFEAU_TIME"
 402 fi
 403
 404 if [ -n "$JIRAFEAU_ONE_TIME" ]; then
 405     one_time='1'
 406 fi
 407
 408 if [ -z "$curl" ]; then
 409     curl="$JIRAFEAU_CURL_PATH"
 410 fi
 411
 412 if [ -z "$curl" ] && [ -e "/usr/bin/curl" ]; then
 413     curl="/usr/bin/curl"
 414 fi
 415
 416 if [ -z "$curl" ] && [ -e "/bin/curl.exe" ]; then
 417     curl="/bin/curl.exe"
 418 fi
 419
 420 if [ -z "$curl" ]; then
 421     echo "Please set your curl binary path (by editing this script or export JIRAFEAU_CURL_PATH global variable)."
 422     exit
 423 fi
 424
 425 if [ -z "$2" ]; then
 426     echo "man:"
 427     echo "    $0 send PATH [PASSWORD]"
 428     echo "    $0 get URL [PASSWORD]"
 429     echo "    $0 delete URL"
 430     echo ""
 431     echo "Global variables to export:"
 432     echo "    JIRAFEAU_PROXY : example: proxysever.test.com:3128"
 433     echo "    JIRAFEAU_URL : example: http://mysite/jirafeau/script.php"
 434     echo "    JIRAFEAU_TIME : minute, hour, day, week, year, month or none"
 435     echo "    JIRAFEAU_ONE_TIME : set anything or set empty"
 436     echo "    JIRAFEAU_CURL : path to your curl binary"
 437
 438     exit 0
 439 fi
 440
 441 if [ -n "$proxy" ]; then
 442     proxy="-x $proxy"
 443 fi
 444
 445 options=''
 446 if [ -n "$one_time" ]; then
 447     options="$options -F one_time_download=1"
 448 fi
 449
 450 password=''
 451 if [ -n "$3" ]; then
 452     password="$3"
 453     options="$options -F key=$password"
 454 fi
 455
 456 if [ "$1" == "send" ]; then
 457     if [ ! -f "$2" ]; then
 458         echo "File \"$2\" does not exists."
 459         exit
 460     fi
 461
 462     # Ret result
 463     res=$($curl -X POST --http1.0 $proxy $options \
 464                   -F "time=$time" \
 465                   -F "file=@$2" \
 466                   $url)
 467
 468     if [[ "$res" == "Error" ]]; then
 469         echo "Error while uploading."
 470         exit
 471     fi
 472
 473     # Not using head or tail to minimise command dependencies
 474     code=$(cnt=0; echo "$res" | while read l; do
 475         if [[ "$cnt" == "0" ]]; then
 476             echo "$l"
 477         fi
 478         cnt=$(( cnt + 1 ))
 479         done)
 480     del_code=$(cnt=0; echo "$res" | while read l; do
 481         if [[ "$cnt" == "1" ]]; then
 482             echo "$l"
 483         fi
 484         cnt=$(( cnt + 1 ))
 485         done)
 486     echo "${url}?h=$code"
 487     echo "${url}?h=$code&d=$del_code"
 488 elif [ "$1" == "get" ]; then
 489     if [ -z "$password" ]; then
 490         $curl $proxy -OJ "$2"
 491     else
 492         $curl $proxy -OJ -X POST -F key=$password "$2"
 493     fi
 494 elif [ "$1" == "delete" ]; then
 495     $curl $proxy "$2"
 496 fi
 497 <?php
 498     }
 499     else
 500     {
 501         echo "Error";
 502         exit;
 503     }
 504 }
 505 /* Initialize an asynchronous upload. */
 506 elseif (isset ($_GET['init_async']))
 507 {
 508     if (jirafeau_has_upload_password ($cfg) &&
 509          (!isset ($_POST['upload_password']) ||
 510           !jirafeau_challenge_upload_password ($cfg, $_POST['upload_password'])))
 511     {
 512         echo "Error";
 513         exit;
 514     }
 515
 516     if (!isset ($_POST['filename']))
 517     {
 518         echo "Error";
 519         exit;
 520     }
 521
 522     $type = '';
 523     if (isset ($_POST['type']))
 524         $type = $_POST['type'];
 525
 526     $key = '';
 527     if (isset ($_POST['key']))
 528         $key = $_POST['key'];
 529
 530     $time = time ();
 531     if (!isset ($_POST['time']) || !$cfg['availabilities'][$_POST['time']])
 532     {
 533         echo "Error";
 534         exit;
 535     }
 536     else
 537         switch ($_POST['time'])
 538         {
 539             case 'minute':
 540                 $time += JIRAFEAU_MINUTE;
 541                 break;
 542             case 'hour':
 543                 $time += JIRAFEAU_HOUR;
 544                 break;
 545             case 'day':
 546                 $time += JIRAFEAU_DAY;
 547                 break;
 548             case 'week':
 549                 $time += JIRAFEAU_WEEK;
 550                 break;
 551             case 'month':
 552                 $time += JIRAFEAU_MONTH;
 553                 break;
 554             case 'year':
 555                 $time += JIRAFEAU_YEAR;
 556                 break;
 557             default:
 558                 $time = JIRAFEAU_INFINITY;
 559                 break;
 560         }
 561     echo jirafeau_async_init ($_POST['filename'],
 562                               $type,
 563                               isset ($_POST['one_time_download']),
 564                               $key,
 565                               $time,
 566                               $_SERVER['REMOTE_ADDR']);
 567 }
 568 /* Continue an asynchronous upload. */
 569 elseif (isset ($_GET['push_async']))
 570 {
 571     if ((!isset ($_POST['ref']))
 572         || (!isset ($_FILES['data']))
 573         || (!isset ($_POST['code'])))
 574         echo "Error";
 575     else
 576     {
 577         echo jirafeau_async_push ($_POST['ref'],
 578                                   $_FILES['data'],
 579                                   $_POST['code'],
 580                                   $cfg['maximal_upload_size']);
 581     }
 582 }
 583 /* Finalize an asynchronous upload. */
 584 elseif (isset ($_GET['end_async']))
 585 {
 586     if (!isset ($_POST['ref'])
 587         || !isset ($_POST['code']))
 588         echo "Error";
 589     else
 590         echo jirafeau_async_end ($_POST['ref'], $_POST['code'], $cfg['enable_crypt'], $cfg['link_name_length']);
 591 }
 592 else
 593     echo "Error";
 594 exit;
 595 ?>
 596