1
|
|
|
<?php |
2
|
|
|
|
3
|
|
|
namespace Alpha\Controller; |
4
|
|
|
|
5
|
|
|
use Alpha\Exception\ResourceNotFoundException; |
6
|
|
|
use Alpha\Exception\IllegalArguementException; |
7
|
|
|
use Alpha\View\Widget\Image; |
8
|
|
|
use Alpha\Util\Config\ConfigProvider; |
9
|
|
|
use Alpha\Util\Logging\Logger; |
10
|
|
|
use Alpha\Util\Http\Request; |
11
|
|
|
use Alpha\Util\Http\Response; |
12
|
|
|
use Alpha\Model\Type\Boolean; |
13
|
|
|
|
14
|
|
|
/** |
15
|
|
|
* Controller for viewing an image rendered with the Image widget. |
16
|
|
|
* |
17
|
|
|
* @since 1.0 |
18
|
|
|
* |
19
|
|
|
* @author John Collins <[email protected]> |
20
|
|
|
* @license http://www.opensource.org/licenses/bsd-license.php The BSD License |
21
|
|
|
* @copyright Copyright (c) 2018, John Collins (founder of Alpha Framework). |
22
|
|
|
* All rights reserved. |
23
|
|
|
* |
24
|
|
|
* <pre> |
25
|
|
|
* Redistribution and use in source and binary forms, with or |
26
|
|
|
* without modification, are permitted provided that the |
27
|
|
|
* following conditions are met: |
28
|
|
|
* |
29
|
|
|
* * Redistributions of source code must retain the above |
30
|
|
|
* copyright notice, this list of conditions and the |
31
|
|
|
* following disclaimer. |
32
|
|
|
* * Redistributions in binary form must reproduce the above |
33
|
|
|
* copyright notice, this list of conditions and the |
34
|
|
|
* following disclaimer in the documentation and/or other |
35
|
|
|
* materials provided with the distribution. |
36
|
|
|
* * Neither the name of the Alpha Framework nor the names |
37
|
|
|
* of its contributors may be used to endorse or promote |
38
|
|
|
* products derived from this software without specific |
39
|
|
|
* prior written permission. |
40
|
|
|
* |
41
|
|
|
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND |
42
|
|
|
* CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, |
43
|
|
|
* INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF |
44
|
|
|
* MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE |
45
|
|
|
* DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR |
46
|
|
|
* CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, |
47
|
|
|
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT |
48
|
|
|
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; |
49
|
|
|
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) |
50
|
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN |
51
|
|
|
* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE |
52
|
|
|
* OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS |
53
|
|
|
* SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
54
|
|
|
* </pre> |
55
|
|
|
*/ |
56
|
|
|
class ImageController extends Controller implements ControllerInterface |
57
|
|
|
{ |
58
|
|
|
/** |
59
|
|
|
* Trace logger. |
60
|
|
|
* |
61
|
|
|
* @var \Alpha\Util\Logging\Logger |
62
|
|
|
* |
63
|
|
|
* @since 1.0 |
64
|
|
|
*/ |
65
|
|
|
private static $logger = null; |
|
|
|
|
66
|
|
|
|
67
|
|
|
/** |
68
|
|
|
* Constructor. |
69
|
|
|
* |
70
|
|
|
* @param string $visibility The name of the rights group that can access this controller. |
71
|
|
|
* |
72
|
|
|
* @since 1.0 |
73
|
|
|
*/ |
74
|
|
|
public function __construct($visibility = 'Public') |
75
|
|
|
{ |
76
|
|
|
self::$logger = new Logger('ImageController'); |
77
|
|
|
self::$logger->debug('>>__construct()'); |
78
|
|
|
|
79
|
|
|
// ensure that the super class constructor is called, indicating the rights group |
80
|
|
|
parent::__construct($visibility); |
81
|
|
|
|
82
|
|
|
self::$logger->debug('<<__construct'); |
83
|
|
|
} |
84
|
|
|
|
85
|
|
|
/** |
86
|
|
|
* Handles get requests. |
87
|
|
|
* |
88
|
|
|
* @param \Alpha\Util\Http\Request $request |
89
|
|
|
* |
90
|
|
|
* @return \Alpha\Util\Http\Response |
91
|
|
|
* |
92
|
|
|
* @since 1.0 |
93
|
|
|
* |
94
|
|
|
* @throws \Alpha\Exception\ResourceNotFoundException |
95
|
|
|
* @throws \Alpha\Exception\ResourceNotAllowedException |
96
|
|
|
*/ |
97
|
|
|
public function doGet($request) |
98
|
|
|
{ |
99
|
|
|
self::$logger->debug('>>doGet(request=['.var_export($request, true).'])'); |
100
|
|
|
|
101
|
|
|
$config = ConfigProvider::getInstance(); |
102
|
|
|
|
103
|
|
|
$params = $request->getParams(); |
104
|
|
|
|
105
|
|
|
try { |
106
|
|
|
$imgSource = urldecode($params['source']); |
107
|
|
|
$imgWidth = $params['width']; |
108
|
|
|
$imgHeight = $params['height']; |
109
|
|
|
$imgType = $params['type']; |
110
|
|
|
$imgQuality = (double)$params['quality']; |
111
|
|
|
$imgScale = new Boolean($params['scale']); |
112
|
|
|
$imgSecure = new Boolean($params['secure']); |
113
|
|
|
} catch (\Exception $e) { |
114
|
|
|
self::$logger->error('Required param missing for ImageController controller['.$e->getMessage().']'); |
115
|
|
|
throw new ResourceNotFoundException('File not found'); |
116
|
|
|
} |
117
|
|
|
|
118
|
|
|
$modified = filemtime($imgSource); |
119
|
|
|
|
120
|
|
|
$responseHeaders = array(); |
121
|
|
|
|
122
|
|
|
$responseHeaders['Last-Modified'] = date('D, d M Y H:i:s', $modified).' GMT'; |
123
|
|
|
$responseHeaders['Cache-Control'] = 'max-age=1800'; |
124
|
|
|
|
125
|
|
|
// exit if not modified |
126
|
|
|
if ($request->getHeader('If-Modified-Since') != null) { |
127
|
|
|
if (strtotime($request->getHeader('If-Modified-Since')) == $modified) { |
128
|
|
|
return new Response(304, '', $responseHeaders); |
129
|
|
|
} |
130
|
|
|
} |
131
|
|
|
|
132
|
|
|
// handle secure tokens |
133
|
|
|
if ($imgSecure->getBooleanValue() && $config->get('cms.images.widget.secure')) { |
134
|
|
|
$valid = $this->checkSecurityFields(); |
135
|
|
|
|
136
|
|
|
// if not valid, just return a blank black image of the same dimensions |
137
|
|
|
if (!$valid) { |
138
|
|
|
$im = imagecreatetruecolor($imgWidth, $imgHeight); |
139
|
|
|
$bgc = imagecolorallocate($im, 0, 0, 0); |
140
|
|
|
imagefilledrectangle($im, 0, 0, $imgWidth, $imgHeight, $bgc); |
141
|
|
|
|
142
|
|
|
if ($imgSource == 'png' && $config->get('cms.images.perserve.png')) { |
143
|
|
|
ob_start(); |
144
|
|
|
imagepng($im); |
145
|
|
|
$body = ob_get_contents(); |
146
|
|
|
$contentType = 'image/png'; |
147
|
|
|
ob_end_clean(); |
148
|
|
|
} else { |
149
|
|
|
ob_start(); |
150
|
|
|
imagejpeg($im); |
151
|
|
|
$body = ob_get_contents(); |
152
|
|
|
$contentType = 'image/jpeg'; |
153
|
|
|
ob_end_clean(); |
154
|
|
|
} |
155
|
|
|
|
156
|
|
|
imagedestroy($im); |
157
|
|
|
|
158
|
|
|
self::$logger->warn('The client ['.$request->getUserAgent().'] was blocked from accessing the file ['.$imgSource.'] due to bad security tokens being provided'); |
159
|
|
|
|
160
|
|
|
$responseHeaders['Content-Type'] = $contentType; |
161
|
|
|
|
162
|
|
|
return new Response(200, $body, $responseHeaders); |
163
|
|
|
} |
164
|
|
|
} |
165
|
|
|
|
166
|
|
|
try { |
167
|
|
|
$image = new Image($imgSource, $imgWidth, $imgHeight, $imgType, $imgQuality, $imgScale->getBooleanValue(), $imgSecure->getBooleanValue()); |
168
|
|
|
ob_start(); |
169
|
|
|
$image->renderImage(); |
170
|
|
|
$body = ob_get_contents(); |
171
|
|
|
ob_end_clean(); |
172
|
|
|
} catch (IllegalArguementException $e) { |
173
|
|
|
self::$logger->error($e->getMessage()); |
174
|
|
|
throw new ResourceNotFoundException('File not found'); |
175
|
|
|
} |
176
|
|
|
|
177
|
|
|
self::$logger->debug('<<__doGet'); |
178
|
|
|
|
179
|
|
|
if ($imgSource == 'png' && $config->get('cms.images.perserve.png')) { |
180
|
|
|
$responseHeaders['Content-Type'] = 'image/png'; |
181
|
|
|
} else { |
182
|
|
|
$responseHeaders['Content-Type'] = 'image/jpeg'; |
183
|
|
|
} |
184
|
|
|
|
185
|
|
|
return new Response(200, $body, $responseHeaders); |
186
|
|
|
} |
187
|
|
|
} |
188
|
|
|
|