+global\JUpload::__construct()

Complexity

Conditions	52
Paths	> 20000

Size

Total Lines

172

Duplication

Lines	172
Ratio	100 %

Importance

Changes

0

<?php
    public function __construct($appletparams = [], $classparams = [])
    {
        if ('array' !== gettype($classparams)) {
            $this->abort('Invalid type of parameter classparams: Expecting an array');
        }
        if ('array' !== gettype($appletparams)) {
            $this->abort('Invalid type of parameter appletparams: Expecting an array');
        }

        // set some defaults for the applet params
        if (!isset($appletparams['afterUploadURL'])) {
            $appletparams['afterUploadURL'] = $_SERVER['PHP_SELF'] . '?afterupload=1';
        }
        if (!isset($appletparams['name'])) {
            $appletparams['name'] = 'JUpload';
        }
        if (!isset($appletparams['archive'])) {
            $appletparams['archive'] = 'wjhk.jupload.jar';
        }
        if (!isset($appletparams['code'])) {
            $appletparams['code'] = 'wjhk.jupload2.JUploadApplet';
        }
        if (!isset($appletparams['debugLevel'])) {
            $appletparams['debugLevel'] = 0;
        }
        if (!isset($appletparams['httpUploadParameterType'])) {
            $appletparams['httpUploadParameterType'] = 'array';
        }
        if (!isset($appletparams['showLogWindow'])) {
            $appletparams['showLogWindow'] = ($appletparams['debugLevel'] > 0) ? 'true' : 'false';
        }
        if (!isset($appletparams['width'])) {
            $appletparams['width'] = 640;
        }
        if (!isset($appletparams['height'])) {
            $appletparams['height'] = ('true' === $appletparams['showLogWindow']) ? 500 : 300;
        }
        if (!isset($appletparams['mayscript'])) {
            $appletparams['mayscript'] = 'true';
        }
        if (!isset($appletparams['scriptable'])) {
            $appletparams['scriptable'] = 'false';
        }
        //if (!isset($appletparams['stringUploadSuccess']))
        $appletparams['stringUploadSuccess'] = 'SUCCESS';
        //if (!isset($appletparams['stringUploadError']))
        $appletparams['stringUploadError'] = 'ERROR: (.*)';
        $maxpost                           = $this->tobytes(ini_get('post_max_size'));
        $maxmem                            = $this->tobytes(ini_get('memory_limit'));
        $maxfs                             = $this->tobytes(ini_get('upload_max_filesize'));
        $obd                               = ini_get('open_basedir');
        if (!isset($appletparams['maxChunkSize'])) {
            $maxchunk                     = ($maxpost < $maxmem) ? $maxpost : $maxmem;
            $maxchunk                     = ($maxchunk < $maxfs) ? $maxchunk : $maxfs;
            $maxchunk                     /= 4;
            $optchunk                     = (500000 > $maxchunk) ? $maxchunk : 500000;
            $appletparams['maxChunkSize'] = $optchunk;
        }
        $appletparams['maxChunkSize'] = $this->tobytes($appletparams['maxChunkSize']);
        if (!isset($appletparams['maxFileSize'])) {
            $appletparams['maxFileSize'] = $maxfs;
        }
        $appletparams['maxFileSize'] = $this->tobytes($appletparams['maxFileSize']);
        if (isset($classparams['errormail'])) {
            $appletparams['urlToSendErrorTo'] = $_SERVER['PHP_SELF'] . '?errormail';
        }

        // Same for class parameters
        if (!isset($classparams['demo_mode'])) {
            $classparams['demo_mode'] = false;
        }
        if ($classparams['demo_mode']) {
            $classparams['create_destdir']  = false;
            $classparams['allow_subdirs']   = true;
            $classparams['allow_zerosized'] = true;
            $classparams['duplicate']       = 'overwrite';
        }
        if (!isset($classparams['debug_php']))                                            // set true to log some messages in PHP log
        {
            $classparams['debug_php'] = false;
        }
        if (!isset($this->classparams['allowed_mime_types']))                // array of allowed MIME type
        {
            $classparams['allowed_mime_types'] = 'all';
        }
        if (!isset($this->classparams['allowed_file_extensions']))    // array of allowed file extensions
        {
            $classparams['allowed_file_extensions'] = 'all';
        }
        if (!isset($classparams['verbose_errors']))                        // shouldn't display server info on a production site!
        {
            $classparams['verbose_errors'] = true;
        }
        if (!isset($classparams['session_regenerate'])) {
            $classparams['session_regenerate'] = false;
        }
        if (!isset($classparams['create_destdir'])) {
            $classparams['create_destdir'] = true;
        }
        if (!isset($classparams['allow_subdirs'])) {
            $classparams['allow_subdirs'] = false;
        }
        if (!isset($classparams['spaces_in_subdirs'])) {
            $classparams['spaces_in_subdirs'] = false;
        }
        if (!isset($classparams['allow_zerosized'])) {
            $classparams['allow_zerosized'] = false;
        }
        if (!isset($classparams['duplicate'])) {
            $classparams['duplicate'] = 'rename';
        }
        if (!isset($classparams['dirperm'])) {
            $classparams['dirperm'] = 0755;
        }
        if (!isset($classparams['fileperm'])) {
            $classparams['fileperm'] = 0644;
        }
        if (!isset($classparams['destdir'])) {
            if ('' != $obd) {
                $classparams['destdir'] = $obd;
            } else {
                $classparams['destdir'] = '/var/tmp/jupload_test';
            }
        } else {
            $classparams['destdir'] = str_replace('~', ' ', $classparams['destdir']);
        }
        if ($classparams['create_destdir']) {
            $_umask = umask(0);    // override the system mask
            @mkdir($classparams['destdir'], $classparams['dirperm']);

It seems like you do not handle an error condition here. This can introduce security issues, and is generally not recommended.

            umask($_umask);
        }
        if (!is_dir($classparams['destdir']) && is_writable($classparams['destdir'])) {
            $this->abort('Destination dir not accessible');
        }
        if (!isset($classparams['tmp_prefix'])) {
            $classparams['tmp_prefix'] = 'jutmp.';
        }
        if (!isset($classparams['var_prefix'])) {
            $classparams['var_prefix'] = 'juvar.';
        }
        if (!isset($classparams['jscript_wrapper'])) {
            $classparams['jscript_wrapper'] = 'JUploadSetProperty';
        }
        if (!isset($classparams['tag_jscript'])) {
            $classparams['tag_jscript'] = '<!--JUPLOAD_JSCRIPT-->';
        }
        if (!isset($classparams['tag_applet'])) {
            $classparams['tag_applet'] = '<!--JUPLOAD_APPLET-->';
        }
        if (!isset($classparams['tag_flist'])) {
            $classparams['tag_flist'] = '<!--JUPLOAD_FILES-->';
        }
        if (!isset($classparams['http_flist_start'])) {
            $classparams['http_flist_start'] = "<table border='1'><TR><TH>Filename</TH><TH>file size</TH><TH>Relative path</TH><TH>Full name</TH><TH>md5sum</TH><TH>Specific parameters</TH></TR>";
        }
        if (!isset($classparams['http_flist_end'])) {
            $classparams['http_flist_end'] = "</table>\n";
        }
        if (!isset($classparams['http_flist_file_before'])) {
            $classparams['http_flist_file_before'] = '<tr><td>';
        }
        if (!isset($classparams['http_flist_file_between'])) {
            $classparams['http_flist_file_between'] = '</td><td>';
        }
        if (!isset($classparams['http_flist_file_after'])) {
            $classparams['http_flist_file_after'] = "</td></tr>\n";
        }

        $this->appletparams = $appletparams;
        $this->classparams  = $classparams;
        $this->page_start();
    }