FileManager::getAllowedMimeTypes() - Code Metrics - mambax7/xoopseditors - Measure and Improve Code Quality continuously with Scrutinizer

FileManager::getAllowedMimeTypes() A
last analyzed 2022-06-12 05:55 UTC

↳ Parent: FileManager
Complexity

Conditions	6
Paths	8
Size

Total Lines	23
Code Lines	12
Duplication

Lines	0
Ratio	0 %
Importance

Changes	1
Bugs	0	Features	0
Metric	Value
cc	6
eloc	12
c	1
b	0
f	0
nc	8
nop	0
dl	0
loc	23
rs	9.2222
<?php
/*
Script: FileManager.php
	MooTools FileManager - Backend for the FileManager Script

License:
	MIT-style license.

Copyright:
	Copyright (c) 2009 [Christoph Pojer](http://cpojer.net).

Dependencies:
	- Upload.php
	- Image.php
	- getId3 Library

Options:
	- directory: (string) The base directory to be used for the FileManger
	- baseURL: (string) Absolute URL to the FileManager files
	- assetBasePath: (string) The path to all images and swf files
	- id3Path: (string, optional) The path to the getid3.php file
	- mimeTypesPath: (string, optional) The path to the MimTypes.ini file.
	- dateFormat: (string, defaults to *j M Y - H:i*) The format in which dates should be displayed
	- upload: (boolean, defaults to *false*) Whether to allow uploads or not
	- destroy: (boolean, defaults to *false*) Whether to allow deletion of files or not
	- maxUploadSize: (integeter, defaults to *3145728* bytes) The maximum file size for upload in bytes
	- safe: (string, defaults to *true*) If true, disallows 
	- filter: (string) If specified, the mimetypes to be allowed (for display and upload).
		Example: image/ allows all Image Mimetypes
*/

require_once(FileManagerUtility::getPath() . '/Upload.php');
require_once(/** @scrutinizer ignore-type */ FileManagerUtility::getPath() . '/Upload.php');
require_once(FileManagerUtility::getPath() . '/Image.php');

class FileManager
{

    protected $path     = null;
    protected $length   = null;
    protected $basedir  = null;
    protected $basename = null;
    protected $options;
    protected $post;
    protected $get;

    public function __construct($options)
    {
        $path = FileManagerUtility::getPath();

        $this->options = array_merge(
            [
                'directory'                  => '../Demos/Files',
                'baseURL'                    => '',
                'assetBasePath'              => '../Assets',
                'id3Path'                    => $path . '/Assets/getid3/getid3.php',
                'id3Path'                    => /** @scrutinizer ignore-type */ $path . '/Assets/getid3/getid3.php',
                'mimeTypesPath'              => $path . '/MimeTypes.ini',
                'dateFormat'                 => 'j M Y - H:i',
                'maxUploadSize'              => 1024 * 1024 * 3,
                'upload'                     => false,
                'destroy'                    => false,
                'safe'                       => true,
                'filter'                     => null,

                // Xinha: Allow to specify the "Resize Large Images" tolerance level.
                'suggestedMaxImageDimension' => ['width' => 800, 'height' => 600],
            ],
            $options
        );

        $this->basedir  = realpath($this->options['directory']);
        $this->basename = pathinfo($this->basedir, PATHINFO_BASENAME) . '/';
        $this->basename = /** @scrutinizer ignore-type */ pathinfo($this->basedir, PATHINFO_BASENAME) . '/';
        $this->path     = realpath($this->options['directory'] . '/../');
        $this->length   = strlen($this->path);

        header('Expires: Fri, 01 Jan 1990 00:00:00 GMT');
        header('Cache-Control: no-cache, no-store, max-age=0, must-revalidate');

        $this->get  = $_GET;
        $this->post = $_POST;
    }

    public function fireEvent($event)
    {
        $event = $event ? 'on' . ucfirst($event) : null;
        if (!$event || !method_exists($this, $event)) {
            $event = 'onView';
        }

        $this->{$event}();
    }

    protected function onView()
    {
        $dir   = $this->getDir(!empty($this->post['directory']) ? $this->post['directory'] : null);
        $files = ($files = glob($dir . '/*')) ? $files : [];

        if ($dir != $this->basedir) {
            array_unshift($files, $dir . '/..');
        }
        natcasesort($files);
        foreach ($files as $file) {
            $mime = $this->getMimeType($file);
            if ($this->options['filter'] && 'text/directory' != $mime && !FileManagerUtility::startsWith($mime, $this->options['filter'])) {
                continue;
            }

            $out[is_dir($file) ? 0 : 1][] = [
                'name' => pathinfo($file, PATHINFO_BASENAME),
                'date' => date($this->options['dateFormat'], filemtime($file)),
                'mime' => $this->getMimeType($file),
                'icon' => $this->getIcon($this->normalize($file)),
                'size' => filesize($file)
            ];
        }

        echo json_encode(
            [
                'path'  => $this->getPath($dir),
                'dir'   => [
                    'name' => pathinfo($dir, PATHINFO_BASENAME),
                    'date' => date($this->options['dateFormat'], filemtime($dir)),
                    'mime' => 'text/directory',
                    'icon' => 'dir'
                ],
                'files' => array_merge(!empty($out[0]) ? $out[0] : [], !empty($out[1]) ? $out[1] : [])
            ]
        );
    }

    protected function onDetail()
    {
        if (empty($this->post['directory']) || empty($this->post['file'])) {
            return;
        }

        $file = realpath($this->path . '/' . $this->post['directory'] . '/' . $this->post['file']);
        if (!$this->checkFile($file)) {
            return;
        }

        require_once($this->options['id3Path']);

        // Xinha: The URL is weird in the standard distribution of filemanager, it seems to expect
        // that the files directory (where you are selecting/uploading) is always within the filemanager
        // directory itself somewhere.
        //
        // Also the 'baseURL' seems to be wanted as the parent of the 'basedir' ("directory" option)
        // Xinha is supplying both the same (eg url = /foo/test and dir = /home/bar/public_html/foo/test )
        // so we will rip off the first part of directory, below.
        $url = $this->options['baseURL'] . '/' . preg_replace('/^[^\/]*\//', '', $this->post['directory'] . '/' . $this->post['file']);

        $mime    = $this->getMimeType($file);
        $content = null;

        // Xinha: We want to get some more information about what has been selected in a way
        // we can use it.  Effectively what gets put in here will be passed into the
        // 'onDetails' event handler of your FileManager object (if any).
        $extra_return_detail = [
            'url'  => $url,
            'mime' => $mime
        ];

        if (FileManagerUtility::startsWith($mime, 'image/')) {
            $size    = getimagesize($file);
            $content = '<img src="' . $url . '" class="preview" alt="" />
				<h2>${more}</h2>
				<dl>
					<dt>${width}</dt><dd>' . $size[0] . 'px</dd>
					<dt>${height}</dt><dd>' . $size[1] . 'px</dd>
				</dl>';

            // Xinha: Return some information about the image which can be access
            // from the onDetails event handler in FileManager
            $extra_return_detail['width']  = $size[0];
            $extra_return_detail['height'] = $size[1];
        } elseif (FileManagerUtility::startsWith($mime, 'text/') || 'application/x-javascript' == $mime) {
            $filecontent = file_get_contents($file, null, null, 0, 300);
            $filecontent = file_get_contents($file, /** @scrutinizer ignore-type */ null, null, 0, 300);
            if (!FileManagerUtility::isBinary($filecontent)) {
                $content = '<div class="textpreview">' . nl2br(str_replace(['$', "\t"], ['&#36;', '&nbsp;&nbsp;'], htmlentities($filecontent))) . '</div>';
            }
        } elseif ('application/zip' == $mime) {
            $out    = [[], []];
            $getid3 = new getID3();
            $getid3->Analyze($file);
            foreach ($getid3->info['zip']['files'] as $name => $size) {
                $icon                                 = is_array($size) ? 'dir' : $this->getIcon($name);
                $out[('dir' == $icon) ? 0 : 1][$name] = '<li><a><img src="' . $this->options['assetBasePath'] . '/Icons/' . $icon . '.png" alt="" /> ' . $name . '</a></li>';
                $out[('dir' == $icon) ? 0 : 1][$name] = '<li><a><img src="' . $this->options['assetBasePath'] . '/Icons/' . /** @scrutinizer ignore-type */ $icon . '.png" alt="" /> ' . $name . '</a></li>';
            }
            natcasesort($out[0]);
            natcasesort($out[1]);
            $content = '<ul>' . implode(array_merge($out[0], $out[1])) . '</ul>';
        } elseif (FileManagerUtility::startsWith($mime, 'audio/')) {
            $getid3 = new getID3();
            $getid3->Analyze($file);

            $content = '<div class="object">
					<object type="application/x-shockwave-flash" data="' . $this->options['assetBasePath'] . '/dewplayer.swf?mp3=' . rawurlencode($url) . '&volume=30" width="200" height="20">
						<param name="movie" value="' . $this->options['assetBasePath'] . '/dewplayer.swf?mp3=' . rawurlencode($url) . '&volume=30" />
					</object>
				</div>
				<h2>${more}</h2>
				<dl>
					<dt>${title}</dt><dd>' . $getid3->info['comments']['title'][0] . '</dd>
					<dt>${artist}</dt><dd>' . $getid3->info['comments']['artist'][0] . '</dd>
					<dt>${album}</dt><dd>' . $getid3->info['comments']['album'][0] . '</dd>
					<dt>${length}</dt><dd>' . $getid3->info['playtime_string'] . '</dd>
					<dt>${bitrate}</dt><dd>' . round($getid3->info['bitrate'] / 1000) . 'kbps</dd>
				</dl>';
        }

        echo json_encode(
            array_merge(
                [
                    'content' => $content ? $content : '<div class="margin">
				${nopreview}<br/><button value="' . $url . '">${download}</button>
			</div>'
                ],
                $extra_return_detail
            )
        );
    }

    protected function onDestroy()
    {
        if (!$this->options['destroy'] || empty($this->post['directory']) || empty($this->post['file'])) {
            return;
        }

        $file = realpath($this->path . '/' . $this->post['directory'] . '/' . $this->post['file']);
        if (!$this->checkFile($file)) {
            return;
        }

        $this->unlink($file);

        echo json_encode(
            [
                'content' => 'destroyed'
            ]
        );
    }

    protected function onCreate()
    {
        if ($this->options['upload']) {
            if (empty($this->post['directory']) || empty($this->post['file'])) {
                return;
            }

            $file = $this->getName($this->post['file'], $this->getDir($this->post['directory']));
            if (!$file) {
                return;
            }

            mkdir($file);
        }

        $this->onView();
    }

    protected function onUpload()
    {
        try {
            if (!$this->options['upload']) {
                throw new FileManagerException('disabled');
            }
            if (empty($this->get['directory']) || (function_exists('UploadIsAuthenticated') && !UploadIsAuthenticated($this->get))) {
                throw new FileManagerException('authenticated');
            }

            $dir  = $this->getDir($this->get['directory']);
            $name = pathinfo((Upload::exists('Filedata')) ? $this->getName($_FILES['Filedata']['name'], $dir) : null, PATHINFO_FILENAME);
            $name = pathinfo(/** @scrutinizer ignore-type */ (Upload::exists('Filedata')) ? $this->getName($_FILES['Filedata']['name'], $dir) : null, PATHINFO_FILENAME);
            $file = Upload::move(
                'Filedata',
                $dir . '/',
                [
                    'name'      => $name,
                    'extension' => $this->options['safe'] && $name && in_array(strtolower(pathinfo($_FILES['Filedata']['name'], PATHINFO_EXTENSION)), ['exe', 'dll', 'php', 'php3', 'php4', 'php5', 'phps']) ? 'txt' : null,
                    'extension' => $this->options['safe'] && $name && in_array(strtolower(/** @scrutinizer ignore-type */ pathinfo($_FILES['Filedata']['name'], PATHINFO_EXTENSION)), ['exe', 'dll', 'php', 'php3', 'php4', 'php5', 'phps']) ? 'txt' : null,
                    'size'      => $this->options['maxUploadSize'],
                    'mimes'     => $this->getAllowedMimeTypes()
                ]
            );

            if (FileManagerUtility::startsWith(Upload::mime($file), 'image/') && !empty($this->get['resize'])) {
            if (FileManagerUtility::startsWith(Upload::mime(/** @scrutinizer ignore-type */ $file), 'image/') && !empty($this->get['resize'])) {
                $img  = new Image($file);
                $img  = new Image(/** @scrutinizer ignore-type */ $file);
                $size = $img->getSize();
                if ($size['width'] > $this->options['suggestedMaxImageDimension']['width']) {
                    $img->resize($this->options['suggestedMaxImageDimension']['width'])->save();
                } elseif ($size['height'] > $this->options['suggestedMaxImageDimension']['height']) {
                    $img->resize(null, $this->options['suggestedMaxImageDimension']['height'])->save();
                }
            }

            echo json_encode(
                [
                    'status' => 1,
                    'name'   => pathinfo($file, PATHINFO_BASENAME)
                    'name'   => pathinfo(/** @scrutinizer ignore-type */ $file, PATHINFO_BASENAME)
                ]
            );
        } catch (UploadException $e) {
            echo json_encode(
                [
                    'status' => 0,
                    'error'  => class_exists('ValidatorException') ? strip_tags($e->getMessage()) : '${upload.' . $e->getMessage() . '}' // This is for Styx :)
                ]
            );
        } catch (FileManagerException $e) {
            echo json_encode(
                [
                    'status' => 0,
                    'error'  => '${upload.' . $e->getMessage() . '}'
                ]
            );
        }
    }

    /* This method is used by both move and rename */
    protected function onMove()
    {
        if (empty($this->post['directory']) || empty($this->post['file'])) {
            return;
        }

        $rename = empty($this->post['newDirectory']) && !empty($this->post['name']);
        $dir    = $this->getDir($this->post['directory']);
        $file   = realpath($dir . '/' . $this->post['file']);

        $is_dir = is_dir($file);
        if (!$this->checkFile($file) || (!$rename && $is_dir)) {
            return;
        }

        if ($rename || $is_dir) {
            if (empty($this->post['name'])) {
                return;
            }
            $newname = $this->getName($this->post['name'], $dir);
            $fn      = 'rename';
        } else {
            $newname = $this->getName(pathinfo($file, PATHINFO_FILENAME), $this->getDir($this->post['newDirectory']));
            $fn      = !empty($this->post['copy']) ? 'copy' : 'rename';
        }

        if (!$newname) {
            return;
        }

        $ext = pathinfo($file, PATHINFO_EXTENSION);
        if ($ext) {
            $newname .= '.' . $ext;
            $newname .= '.' . /** @scrutinizer ignore-type */ $ext;
        }
        $fn($file, $newname);

        echo json_encode(
            [
                'name' => pathinfo($this->normalize($newname), PATHINFO_BASENAME),
            ]
        );
    }

    protected function unlink($file)
    {
        $file = realpath($file);
        if ($this->basedir == $file || strlen($this->basedir) >= strlen($file)) {
            return;
        }

        if (is_dir($file)) {
            $files = glob($file . '/*');
            if (is_array($files)) {

                foreach ($files as $f) {
                    $this->unlink($f);
                }
            }

            rmdir($file);
        } else {
            try {
                if ($this->checkFile($file)) {
                    unlink($file);
                }
            } catch (Exception $e) {

            }
        }
    }

    protected function getName($file, $dir)
    {
        $files = [];
        foreach ((array)glob($dir . '/*') as $f) {
            $files[] = pathinfo($f, PATHINFO_FILENAME);
        }

        $pathinfo = pathinfo($file);
        $file     = $dir . '/' . FileManagerUtility::pagetitle($pathinfo['filename'], $files) . (!empty($pathinfo['extension']) ? '.' . $pathinfo['extension'] : null);

        return !$file || !FileManagerUtility::startsWith($file, $this->basedir) || file_exists($file) ? null : $file;
    }

    protected function getIcon($file)
    {
        if (FileManagerUtility::endsWith($file, '/..')) {
            return 'dir_up';
        } elseif (is_dir($file)) {
            return 'dir';
        }

        $ext = pathinfo($file, PATHINFO_EXTENSION);
        return ($ext && file_exists(realpath($this->options['assetBasePath'] . '/Icons/' . $ext . '.png'))) ? $ext : 'default';
        return ($ext && file_exists(realpath($this->options['assetBasePath'] . '/Icons/' . /** @scrutinizer ignore-type */ $ext . '.png'))) ? $ext : 'default';
    }

    protected function getMimeType($file)
    {
        return is_dir($file) ? 'text/directory' : Upload::mime($file);
        return is_dir($file) ? 'text/directory' : Upload::/** @scrutinizer ignore-call */ mime($file);
    }

    protected function getDir($dir)
    {
        $dir = realpath($this->path . '/' . (FileManagerUtility::startsWith($dir, $this->basename) ? $dir : $this->basename));
        return $this->checkFile($dir) ? $dir : $this->basedir;
    }

    protected function getPath($file)
    {
        $file = $this->normalize(substr($file, $this->length));
        return substr($file, FileManagerUtility::startsWith($file, '/') ? 1 : 0);
    }

    protected function checkFile($file)
    {
        $mimes     = $this->getAllowedMimeTypes();
        $hasFilter = $this->options['filter'] && count($mimes);
        $hasFilter = $this->options['filter'] && count(/** @scrutinizer ignore-type */ $mimes);
        if ($hasFilter) {
            array_push($mimes, 'text/directory');
            array_push(/** @scrutinizer ignore-type */ $mimes, 'text/directory');
        }
        return !(!$file || !FileManagerUtility::startsWith($file, $this->basedir) || !file_exists($file) || ($hasFilter && !in_array($this->getMimeType($file), $mimes)));
    }

    protected function normalize($file)
    {
        return preg_replace('/\\\|\/{2,}/', '/', $file);
    }

    protected function getAllowedMimeTypes()
    {
        $filter = $this->options['filter'];

        if (!$filter) {
            return null;
        }
        if (!FileManagerUtility::endsWith($filter, '/')) {
            return [$filter];
        }

        static $mimes;
        if (!$mimes) {
            $mimes = parse_ini_file($this->options['mimeTypesPath']);
        }

        foreach ($mimes as $mime) {
            if (FileManagerUtility::startsWith($mime, $filter)) {
                $mimeTypes[] = strtolower($mime);
            }
        }

        return $mimeTypes;

    }

}

class FileManagerException extends Exception
{
}

/* Stripped-down version of some Styx PHP Framework-Functionality bundled with this FileBrowser. Styx is located at: http://styx.og5.net */

class FileManagerUtility
{

    public static function endsWith($string, $look)
    {
        return strrpos($string, $look) === strlen($string) - strlen($look);
    }

    public static function startsWith($string, $look)
    {
        return 0 === strpos($string, $look);
    }

    public static function pagetitle($data, $options = [])
    {
        static $regex;
        if (!$regex) {
            $regex = [
                explode(
                    ' ',
                    'Æ æ Œ œ ß Ü ü Ö ö Ä ä À Á Â Ã Ä Å &#260; &#258; Ç &#262; &#268; &#270; &#272; Ð È É Ê Ë &#280; &#282; &#286; Ì Í Î Ï &#304; &#321; &#317; &#313; Ñ &#323; &#327; Ò Ó Ô Õ Ö Ø &#336; &#340; &#344; Š &#346; &#350; &#356; &#354; Ù Ú Û Ü &#366; &#368; Ý Ž &#377; &#379; à á â ã ä å &#261; &#259; ç &#263; &#269; &#271; &#273; è é ê ë &#281; &#283; &#287; ì í î ï &#305; &#322; &#318; &#314; ñ &#324; &#328; ð ò ó ô õ ö ø &#337; &#341; &#345; &#347; š &#351; &#357; &#355; ù ú û ü &#367; &#369; ý ÿ ž &#378; &#380;'
                ),
                explode(' ', 'Ae ae Oe oe ss Ue ue Oe oe Ae ae A A A A A A A A C C C D D D E E E E E E G I I I I I L L L N N N O O O O O O O R R S S S T T U U U U U U Y Z Z Z a a a a a a a a c c c d d e e e e e e g i i i i i l l l n n n o o o o o o o o r r s s s t t u u u u u u y y z z z'),
            ];

            $regex[0][] = '"';
            $regex[0][] = "'";
        }

        $data = trim(substr(preg_replace('/(?:[^A-z0-9]|_|\^)+/i', '_', str_replace($regex[0], $regex[1], $data)), 0, 64), '_');
        return !empty($options) ? self::checkTitle($data, $options) : $data;
    }

    protected static function checkTitle($data, $options = [], $i = 0)
    {
        if (!is_array($options)) {
            return $data;
        }

        foreach ($options as $content) {
            if ($content && strtolower($content) == strtolower($data . ($i ? '_' . $i : ''))) {
                return self::checkTitle($data, $options, ++$i);
            }
        }

        return $data . ($i ? '_' . $i : '');
    }

    public static function isBinary($str)
    {
        $array = [0, 255];
        for ($i = 0; $i < strlen($str); $i++) {
            if (in_array(ord($str[$i]), $array)) {
                return true;
            }
        }

        return false;
    }

    public static function getPath()
    {
        static $path;
        return $path ? $path : $path = pathinfo(__FILE__, PATHINFO_DIRNAME);
    }

}

mambax7 / xoopseditors

FileManager::getAllowedMimeTypes() A last analyzed 2022-06-12 05:55 UTC

Complexity

Size

Duplication

Importance

Duplication Side-by-Side

Filter issues like

FileManager::getAllowedMimeTypes() A
last analyzed 2022-06-12 05:55 UTC
