Edit File by line

<?php

[0] Fix | Delete

[1] Fix | Delete

namespace Nextend\Framework\Browse\BulletProof;

[2] Fix | Delete

[3] Fix | Delete

use Nextend\Framework\Filesystem\Filesystem;

[4] Fix | Delete

use Nextend\Framework\Image\ImageEdit;

[5] Fix | Delete

use Nextend\Framework\Request\Request;

[6] Fix | Delete

[7] Fix | Delete

/**

[8] Fix | Delete

* BULLETPROOF,

[9] Fix | Delete

[10] Fix | Delete

* This is a one-file solution for a quick and safe way of

[11] Fix | Delete

* uploading, watermarking, cropping and resizing images

[12] Fix | Delete

* during and after uploads with PHP with best security.

[13] Fix | Delete

[14] Fix | Delete

* This class is heavily commented, to be as much friendly as possible.

[15] Fix | Delete

* Please help out by posting out some bugs/flaws if you encounter any. Thanks!

[16] Fix | Delete

[17] Fix | Delete

* @category Image uploader

[18] Fix | Delete

* @package BulletProof

[19] Fix | Delete

* @version 1.4.0

[20] Fix | Delete

* @author samayo

[21] Fix | Delete

* @link https://github.com/samayo/BulletProof

[22] Fix | Delete

* @license Luke 3:11 ( Free )

[23] Fix | Delete

[24] Fix | Delete

class BulletProof {

[25] Fix | Delete

[26] Fix | Delete

[27] Fix | Delete

|--------------------------------------------------------------------------

[28] Fix | Delete

| Image Upload Properties

[29] Fix | Delete

\--------------------------------------------------------------------------*/

[30] Fix | Delete

[31] Fix | Delete

/**

[32] Fix | Delete

* Set a group of default image types to upload.

[33] Fix | Delete

[34] Fix | Delete

* @var array

[35] Fix | Delete

[36] Fix | Delete

protected $imageType = array(

[37] Fix | Delete

"jpg",

[38] Fix | Delete

"jpeg",

[39] Fix | Delete

"png",

[40] Fix | Delete

"gif",

[41] Fix | Delete

"webp",

[42] Fix | Delete

"svg"

[43] Fix | Delete

);

[44] Fix | Delete

[45] Fix | Delete

/**

[46] Fix | Delete

* Set a default file size to upload. Values are in bytes. Remember: 1kb ~ 1000 bytes.

[47] Fix | Delete

[48] Fix | Delete

* @var array

[49] Fix | Delete

[50] Fix | Delete

protected $imageSize = array(

[51] Fix | Delete

"min" => 1,

[52] Fix | Delete

"max" => 20000000

[53] Fix | Delete

);

[54] Fix | Delete

[55] Fix | Delete

/**

[56] Fix | Delete

* Set a default min & maximum height & width for image to upload.

[57] Fix | Delete

[58] Fix | Delete

* @var array

[59] Fix | Delete

[60] Fix | Delete

protected $imageDimension = array(

[61] Fix | Delete

"height" => 10000,

[62] Fix | Delete

"width" => 10000

[63] Fix | Delete

);

[64] Fix | Delete

[65] Fix | Delete

/**

[66] Fix | Delete

* Set a default folder to upload images, if it does not exist, it will be created.

[67] Fix | Delete

[68] Fix | Delete

* @var string

[69] Fix | Delete

[70] Fix | Delete

protected $uploadDir = "uploads";

[71] Fix | Delete

[72] Fix | Delete

/**

[73] Fix | Delete

* To get the real image/mime type. i.e gif, jpeg, png, ....

[74] Fix | Delete

[75] Fix | Delete

* @var string

[76] Fix | Delete

[77] Fix | Delete

protected $getMimeType;

[78] Fix | Delete

[79] Fix | Delete

[80] Fix | Delete

|--------------------------------------------------------------------------

[81] Fix | Delete

| Image Upload Methods

[82] Fix | Delete

\--------------------------------------------------------------------------*/

[83] Fix | Delete

[84] Fix | Delete

/**

[85] Fix | Delete

* Stores image types to upload

[86] Fix | Delete

[87] Fix | Delete

* @param array $fileTypes - ex: ['jpg', 'doc', 'txt'].

[88] Fix | Delete

[89] Fix | Delete

* @return $this

[90] Fix | Delete

[91] Fix | Delete

public function fileTypes(array $fileTypes) {

[92] Fix | Delete

$this->imageType = $fileTypes;

[93] Fix | Delete

[94] Fix | Delete

return $this;

[95] Fix | Delete

}

[96] Fix | Delete

[97] Fix | Delete

/**

[98] Fix | Delete

* Minimum and Maximum allowed image size for upload (in bytes),

[99] Fix | Delete

[100] Fix | Delete

* @param array $fileSize - ex: ['min'=>500, 'max'=>1000]

[101] Fix | Delete

[102] Fix | Delete

* @return $this

[103] Fix | Delete

[104] Fix | Delete

public function limitSize(array $fileSize) {

[105] Fix | Delete

$this->imageSize = $fileSize;

[106] Fix | Delete

[107] Fix | Delete

return $this;

[108] Fix | Delete

}

[109] Fix | Delete

[110] Fix | Delete

/**

[111] Fix | Delete

* Default & maximum allowed height and width image to download.

[112] Fix | Delete

[113] Fix | Delete

* @param array $dimensions

[114] Fix | Delete

[115] Fix | Delete

* @return $this

[116] Fix | Delete

[117] Fix | Delete

public function limitDimension(array $dimensions) {

[118] Fix | Delete

$this->imageDimension = $dimensions;

[119] Fix | Delete

[120] Fix | Delete

return $this;

[121] Fix | Delete

}

[122] Fix | Delete

[123] Fix | Delete

/**

[124] Fix | Delete

* Get the real image's Extension/mime type

[125] Fix | Delete

[126] Fix | Delete

* @param $imageName

[127] Fix | Delete

[128] Fix | Delete

* @return mixed

[129] Fix | Delete

* @throws Exception

[130] Fix | Delete

[131] Fix | Delete

protected function getMimeType($imageName) {

[132] Fix | Delete

if (!file_exists($imageName)) {

[133] Fix | Delete

throw new Exception("Image " . $imageName . " does not exist");

[134] Fix | Delete

}

[135] Fix | Delete

[136] Fix | Delete

$listOfMimeTypes = array(

[137] Fix | Delete

1 => "gif",

[138] Fix | Delete

"jpeg",

[139] Fix | Delete

"png",

[140] Fix | Delete

"swf",

[141] Fix | Delete

"psd",

[142] Fix | Delete

"bmp",

[143] Fix | Delete

"tiff",

[144] Fix | Delete

"tiff",

[145] Fix | Delete

"jpc",

[146] Fix | Delete

"jp2",

[147] Fix | Delete

"jpx",

[148] Fix | Delete

"jb2",

[149] Fix | Delete

"swc",

[150] Fix | Delete

"iff",

[151] Fix | Delete

"wbmp",

[152] Fix | Delete

"xmb",

[153] Fix | Delete

"ico",

[154] Fix | Delete

"webp",

[155] Fix | Delete

"svg"

[156] Fix | Delete

);

[157] Fix | Delete

[158] Fix | Delete

$imageType = ImageEdit::exif_imagetype($imageName);

[159] Fix | Delete

if (isset($listOfMimeTypes[$imageType])) {

[160] Fix | Delete

return $listOfMimeTypes[$imageType];

[161] Fix | Delete

}

[162] Fix | Delete

[163] Fix | Delete

return false;

[164] Fix | Delete

}

[165] Fix | Delete

[166] Fix | Delete

/**

[167] Fix | Delete

* Handy method for getting image dimensions (W & H) in pixels.

[168] Fix | Delete

[169] Fix | Delete

* @param $getImage - The image name

[170] Fix | Delete

[171] Fix | Delete

* @return array

[172] Fix | Delete

[173] Fix | Delete

protected function getPixels($getImage) {

[174] Fix | Delete

list($width, $height) = getImageSize($getImage);

[175] Fix | Delete

[176] Fix | Delete

return array(

[177] Fix | Delete

"width" => $width,

[178] Fix | Delete

"height" => $height

[179] Fix | Delete

);

[180] Fix | Delete

}

[181] Fix | Delete

[182] Fix | Delete

/**

[183] Fix | Delete

* Rename file either from method or by generating a random one.

[184] Fix | Delete

[185] Fix | Delete

* @param $isNameProvided - A new name for the file.

[186] Fix | Delete

[187] Fix | Delete

* @return string

[188] Fix | Delete

[189] Fix | Delete

protected function imageRename($isNameProvided) {

[190] Fix | Delete

if ($isNameProvided) {

[191] Fix | Delete

return $isNameProvided . "." . $this->getMimeType;

[192] Fix | Delete

}

[193] Fix | Delete

[194] Fix | Delete

return uniqid(true) . "_" . str_shuffle(implode(range("E", "Q"))) . "." . $this->getMimeType;

[195] Fix | Delete

}

[196] Fix | Delete

[197] Fix | Delete

/**

[198] Fix | Delete

* Get the specified upload dir, if it does not exist, create a new one.

[199] Fix | Delete

[200] Fix | Delete

* @param $directoryName - directory name where you want your files to be uploaded

[201] Fix | Delete

[202] Fix | Delete

* @return $this

[203] Fix | Delete

* @throws Exception

[204] Fix | Delete

[205] Fix | Delete

public function uploadDir($directoryName) {

[206] Fix | Delete

if (!file_exists($directoryName) && !is_dir($directoryName)) {

[207] Fix | Delete

[208] Fix | Delete

$createFolder = Filesystem::createFolder("" . $directoryName);

[209] Fix | Delete

if (!$createFolder) {

[210] Fix | Delete

throw new Exception("Folder " . $directoryName . " could not be created");

[211] Fix | Delete

}

[212] Fix | Delete

}

[213] Fix | Delete

$this->uploadDir = $directoryName;

[214] Fix | Delete

[215] Fix | Delete

return $this;

[216] Fix | Delete

}

[217] Fix | Delete

[218] Fix | Delete

/**

[219] Fix | Delete

* For getting common error messages from FILES[] array during upload.

[220] Fix | Delete

[221] Fix | Delete

* @return array

[222] Fix | Delete

[223] Fix | Delete

protected function commonUploadErrors($key) {

[224] Fix | Delete

$uploadErrors = array(

[225] Fix | Delete

UPLOAD_ERR_OK => "...",

[226] Fix | Delete

UPLOAD_ERR_INI_SIZE => "File is larger than the specified amount set by the server",

[227] Fix | Delete

UPLOAD_ERR_FORM_SIZE => "File is larger than the specified amount specified by browser",

[228] Fix | Delete

UPLOAD_ERR_PARTIAL => "File could not be fully uploaded. Please try again later",

[229] Fix | Delete

UPLOAD_ERR_NO_FILE => "File is not found",

[230] Fix | Delete

UPLOAD_ERR_NO_TMP_DIR => "Can't write to disk, due to server configuration ( No tmp dir found )",

[231] Fix | Delete

UPLOAD_ERR_CANT_WRITE => "Failed to write file to disk. Please check you file permissions",

[232] Fix | Delete

UPLOAD_ERR_EXTENSION => "A PHP extension has halted this file upload process"

[233] Fix | Delete

);

[234] Fix | Delete

[235] Fix | Delete

return $uploadErrors[$key];

[236] Fix | Delete

}

[237] Fix | Delete

[238] Fix | Delete

/**

[239] Fix | Delete

* Simple file check and delete wrapper.

[240] Fix | Delete

[241] Fix | Delete

* @param $fileToDelete

[242] Fix | Delete

[243] Fix | Delete

* @return bool

[244] Fix | Delete

* @throws Exception

[245] Fix | Delete

[246] Fix | Delete

public function deleteFile($fileToDelete) {

[247] Fix | Delete

if (file_exists($fileToDelete) && !unlink($fileToDelete)) {

[248] Fix | Delete

throw new Exception("File may have been deleted or does not exist");

[249] Fix | Delete

}

[250] Fix | Delete

[251] Fix | Delete

return true;

[252] Fix | Delete

}

[253] Fix | Delete

[254] Fix | Delete

/**

[255] Fix | Delete

* Final image uploader method, to check for errors and upload

[256] Fix | Delete

[257] Fix | Delete

* @param $fileToUpload

[258] Fix | Delete

* @param null $isNameProvided

[259] Fix | Delete

[260] Fix | Delete

* @return string

[261] Fix | Delete

* @throws Exception

[262] Fix | Delete

[263] Fix | Delete

public function upload($fileToUpload, $isNameProvided = null) {

[264] Fix | Delete

[265] Fix | Delete

$isMedia = false;

[266] Fix | Delete

// Check if any errors are thrown by the FILES[] array

[267] Fix | Delete

if ($fileToUpload["error"]) {

[268] Fix | Delete

throw new Exception($this->commonUploadErrors($fileToUpload["error"]));

[269] Fix | Delete

}

[270] Fix | Delete

[271] Fix | Delete

if (function_exists("mime_content_type")) {

[272] Fix | Delete

$rawMime = mime_content_type($fileToUpload["tmp_name"]);

[273] Fix | Delete

} else {

[274] Fix | Delete

if (!empty($fileToUpload['name'])) {

[275] Fix | Delete

$path_parts = pathinfo($fileToUpload['name']);

[276] Fix | Delete

switch ($path_parts['extension']) {

[277] Fix | Delete

case 'mp4':

[278] Fix | Delete

$rawMime = 'video/mp4';

[279] Fix | Delete

break;

[280] Fix | Delete

case 'mp3':

[281] Fix | Delete

$rawMime = 'audio/mpeg';

[282] Fix | Delete

break;

[283] Fix | Delete

default:

[284] Fix | Delete

$rawMime = '';

[285] Fix | Delete

break;

[286] Fix | Delete

}

[287] Fix | Delete

}

[288] Fix | Delete

}

[289] Fix | Delete

[290] Fix | Delete

switch ($rawMime) {

[291] Fix | Delete

case 'video/mp4':

[292] Fix | Delete

$this->getMimeType = 'mp4';

[293] Fix | Delete

$isMedia = true;

[294] Fix | Delete

break;

[295] Fix | Delete

case 'audio/mpeg':

[296] Fix | Delete

$this->getMimeType = 'mp3';

[297] Fix | Delete

$isMedia = true;

[298] Fix | Delete

break;

[299] Fix | Delete

}

[300] Fix | Delete

[301] Fix | Delete

if (!$isMedia) {

[302] Fix | Delete

// First get the real file extension

[303] Fix | Delete

$this->getMimeType = $this->getMimeType($fileToUpload["tmp_name"]);

[304] Fix | Delete

[305] Fix | Delete

$specialImage = false;

[306] Fix | Delete

if ($this->getMimeType === false) {

[307] Fix | Delete

if (isset($fileToUpload["type"]) && strpos($fileToUpload["type"], 'image/') !== false) {

[308] Fix | Delete

$this->getMimeType = str_replace(array(

[309] Fix | Delete

'image/',

[310] Fix | Delete

'svg+xml'

[311] Fix | Delete

), array(

[312] Fix | Delete

'',

[313] Fix | Delete

'svg'

[314] Fix | Delete

), $fileToUpload["type"]);

[315] Fix | Delete

$specialImage = true;

[316] Fix | Delete

}

[317] Fix | Delete

}

[318] Fix | Delete

[319] Fix | Delete

// Check if this file type is allowed for upload

[320] Fix | Delete

if (!in_array($this->getMimeType, $this->imageType)) {

[321] Fix | Delete

throw new Exception(" This is not allowed file type!

[322] Fix | Delete

Please only upload ( " . implode(", ", $this->imageType) . " ) file types");

[323] Fix | Delete

}

[324] Fix | Delete

[325] Fix | Delete

//Check if size (in bytes) of the image are above or below of defined in 'limitSize()'

[326] Fix | Delete

if ($fileToUpload["size"] < $this->imageSize["min"] || $fileToUpload["size"] > $this->imageSize["max"]) {

[327] Fix | Delete

throw new Exception("File sizes must be between " . implode(" to ", $this->imageSize) . " bytes");

[328] Fix | Delete

}

[329] Fix | Delete

[330] Fix | Delete

// check if image is valid pixel-wise.

[331] Fix | Delete

if (!$specialImage) {

[332] Fix | Delete

$pixel = $this->getPixels($fileToUpload["tmp_name"]);

[333] Fix | Delete

[334] Fix | Delete

if ($pixel["width"] < 4 || $pixel["height"] < 4) {

[335] Fix | Delete

throw new Exception("This file is either too small or corrupted to be an image");

[336] Fix | Delete

}

[337] Fix | Delete

[338] Fix | Delete

if ($pixel["height"] > $this->imageDimension["height"] || $pixel["width"] > $this->imageDimension["width"]) {

[339] Fix | Delete

throw new Exception("Image pixels/size must be below " . implode(", ", $this->imageDimension) . " pixels");

[340] Fix | Delete

}

[341] Fix | Delete

}

[342] Fix | Delete

}

[343] Fix | Delete

[344] Fix | Delete

// create upload directory if it does not exist

[345] Fix | Delete

$this->uploadDir($this->uploadDir);

[346] Fix | Delete

[347] Fix | Delete

$i = '';

[348] Fix | Delete

$newFileName = $this->imageRename($isNameProvided);

[349] Fix | Delete

[350] Fix | Delete

while (file_exists($this->uploadDir . "/" . $newFileName)) {

[351] Fix | Delete

// The file already uploaded, nothing to do here

[352] Fix | Delete

if (self::isFilesIdentical($this->uploadDir . "/" . $newFileName, $fileToUpload["tmp_name"])) {

[353] Fix | Delete

return $this->uploadDir . "/" . $newFileName;

[354] Fix | Delete

}

[355] Fix | Delete

$i++;

[356] Fix | Delete

$newFileName = $this->imageRename($isNameProvided . $i);

[357] Fix | Delete

}

[358] Fix | Delete

[359] Fix | Delete

// Upload the file

[360] Fix | Delete

$moveUploadedFile = $this->moveUploadedFile($fileToUpload["tmp_name"], $this->uploadDir . "/" . $newFileName);

[361] Fix | Delete

[362] Fix | Delete

if ($moveUploadedFile) {

[363] Fix | Delete

return $this->uploadDir . "/" . $newFileName;

[364] Fix | Delete

} else {

[365] Fix | Delete

throw new Exception(" File could not be uploaded. Unknown error occurred. ");

[366] Fix | Delete

}

[367] Fix | Delete

}

[368] Fix | Delete

[369] Fix | Delete

public function moveUploadedFile($uploaded_file, $new_file) {

[370] Fix | Delete

if (!is_uploaded_file($uploaded_file)) {

[371] Fix | Delete

return copy($uploaded_file, $new_file);

[372] Fix | Delete

}

[373] Fix | Delete

[374] Fix | Delete

return move_uploaded_file($uploaded_file, $new_file);

[375] Fix | Delete

}

[376] Fix | Delete

[377] Fix | Delete

private static function isFilesIdentical($fn1, $fn2) {

[378] Fix | Delete

if (filetype($fn1) !== filetype($fn2)) return FALSE;

[379] Fix | Delete

[380] Fix | Delete

if (filesize($fn1) !== filesize($fn2)) return FALSE;

[381] Fix | Delete

[382] Fix | Delete

if (sha1_file($fn1) != sha1_file($fn2)) return false;

[383] Fix | Delete

[384] Fix | Delete

return true;

[385] Fix | Delete

}

[386] Fix | Delete

}

[387] Fix | Delete