upload.inc.php

   1 <?php
   2 global $journalcol;
   3 $journalcol = [
   4         'assign' => 'Toegewezen aan',
   5         'subject' => 'Onderwerp',
   6 ];
   7
   8 function userupload($input, $target = NULL, $filename = NULL)
   9 {
  10         switch ($input['error']) {
  11         case UPLOAD_ERR_OK:
  12                 break;
  13         case UPLOAD_ERR_INI_SIZE:
  14         case UPLOAD_ERR_FORM_SIZE:
  15                 throw new Exception('bestand te groot');
  16                 break;
  17         case UPLOAD_ERR_NO_FILE:
  18                 return; # current
  19         default:
  20                 throw new Exception('bestand niet goed ontvangen: '.$input['error']);
  21         }
  22
  23         if (isset($target)) {
  24                 if (!file_exists($target) and !@mkdir($target, 0777, TRUE)) {
  25                         throw new Exception("bestand kon niet geplaatst worden in $target");
  26                 }
  27                 $target .= '/';
  28         }
  29         if (isset($filename)) {
  30                 $target .= $filename;
  31         }
  32         else {
  33                 $target .= $input['name'];
  34         }
  35
  36         if (file_exists($target)) {
  37                 throw new Exception("bestandsnaam al aanwezig op $target");
  38         }
  39         if (!@move_uploaded_file($input['tmp_name'], $target)) {
  40                 throw new Exception("bestand kon niet worden opgeslagen in $target");
  41         }
  42
  43         foreach (@glob('thumb/*/') as $thumbres) {
  44                 # attempt to remove old derivations
  45                 @unlink($thumbres . '/' . $target);
  46         }
  47         return $target;
  48 }
  49
  50 function messagehtml($input)
  51 {
  52         # convert user textarea post to formatted html
  53         global $User;
  54         if (empty($input)) {
  55                 return;
  56         }
  57         if ($User and $User->admin and preg_match('/\A<[a-z][^>]*>/', $input)) {
  58                 return $input;  # allow html input as is if privileged
  59         }
  60         $markup = [
  61                 '{&lt;((?:\w+:|/).+?)&gt;}'    => '<$1>',                # unescape link entities
  62                 '{<(?:https?://)?([^>\s|]+)>}' => '<$1 $1>',             # unnamed link
  63                 '{<([^>\s|]+)[\s|]([^>]+)>}'   => '<a href="$1">$2</a>', # hyperlink
  64                 "/\r\n?/" => "\n",        # unix newlines
  65                 "/  +\n/" => "<br />",    # trailing spaces for hard line break
  66                 "/^[-*] (.*)$\n?/m"            => '<li>$1</li>',         # list item
  67                 "/^(.+)$\n?/m"                 => "<p>$1</p>\n",         # paragraph
  68                 "{^<p>(<li>.*</li>)(?:</p>\n)?}m" => "<ul>$1</ul>\n",    # list container
  69                 '/_(?<!\w_)(.+?)_(?!\w)/'      => '<em>$1</em>',         # italic
  70                 '/\*(?<!\w\*)(.+?)\*(?!\w)/'   => '<strong>$1</strong>', # bold
  71                 '/~(?<!\w~)(.+?)~(?!\w)/'      => '<s>$1</s>',           # stricken
  72                 '/`(?<!\w`)(.+?)`(?!\w)/'      => '<code>$1</code>',     # monospace
  73         ];
  74         return preg_replace(array_keys($markup), array_values($markup), htmlspecialchars($input));
  75 }
  76
  77 function createcomment($input, &$Issue = NULL)
  78 {
  79         # insert user message as database issue/reply
  80         global $User, $Db, $Page, $journalcol;
  81
  82         $reply = [];
  83         if (isset($input['reply']) and $body = $input['reply']) {
  84                 $reply['raw'] = $body;
  85                 $reply['message'] = messagehtml($body);
  86         }
  87         if (isset($input['announce'])) {
  88                 $reply['announced'] = !!$input['announce'];
  89         }
  90         if ($_FILES and !empty($_FILES['image'])) {
  91                 $target = 'data/upload';
  92                 if (!file_exists($target)) {
  93                         throw new Exception("er is geen uploadmap aanwezig op $target");
  94                 }
  95                 $target .= '/' . $User->login;
  96                 if ($result = userupload($_FILES['image'], $target)) {
  97                         $reply['raw'] .= "/$result";
  98                         if (preg_match('(^image/)', $_FILES['image']['type'])) {
  99                                 $reply['message'] .= sprintf('<p><img src="/thumb/640x/%s" /></p>', $result);
 100                         }
 101                         else {
 102                                 $reply['message'] .= sprintf('<p>Bijgevoegd bestand: <a href="/%s" />%s</a></p>',
 103                                         $result, basename($result)
 104                                 );
 105                         }
 106                 }
 107         }
 108         $query = $Db->set('comments', $reply + [
 109                 'page'    => "{$Page->handler}/{$Issue->id}",
 110                 'author'  => $User->login,
 111         ]);
 112         if (!$query->rowCount()) {
 113                 throw new Exception('Fout bij opslaan');
 114         }
 115         $newcomment = $Db->dbh->lastInsertId('comments_id_seq');
 116
 117         if (isset($Issue)) {
 118                 $row = [];
 119                 foreach (array_keys($journalcol) as $col) {
 120                         if (!isset($input[$col])) continue;
 121                         $row[$col] = $input[$col] ?: NULL;
 122                 }
 123                 if (isset($input['status'])) {
 124                         $reset = !empty($input['status']);
 125                         if (isset($Issue->closed) !== $reset) {
 126                                 $row['closed'] = $reset ? ['now()'] : NULL;
 127                         }
 128                 }
 129                 $derived = ['updated' => ['now()']];
 130                 $filter = ['id = ? RETURNING *', $Issue->id];
 131                 $subquery = $Db->set('issues', $row + $derived, $filter);
 132
 133                 if ($updated = $subquery->fetch()) {
 134                         foreach (array_keys($row) as $col) {
 135                                 if ($updated->$col === $Issue->$col) continue; # unaltered
 136                                 $Db->set('journal', [
 137                                         'comment_id' => $newcomment,
 138                                         'property'   => 'attr',
 139                                         'col'        => $col,
 140                                         'old_value'  => $Issue->$col,
 141                                         'value'      => $updated->$col,
 142                                 ]);
 143                         }
 144                         $Issue = $updated;
 145                 }
 146         }
 147
 148         return $newcomment;
 149 }