View source
<?php
namespace Drupal\Tests\file\Functional;
use Drupal\Core\File\FileSystemInterface;
use Drupal\file\Entity\File;
use Drupal\Tests\TestFileCreationTrait;
class SaveUploadFormTest extends FileManagedTestBase {
use TestFileCreationTrait {
getTestFiles as drupalGetTestFiles;
}
public static $modules = [
'dblog',
];
protected $defaultTheme = 'classy';
protected $image;
protected $phpfile;
protected $maxFidBefore;
protected $imageExtension;
protected function setUp() {
parent::setUp();
$account = $this
->drupalCreateUser([
'access site reports',
]);
$this
->drupalLogin($account);
$image_files = $this
->drupalGetTestFiles('image');
$this->image = File::create((array) current($image_files));
list(, $this->imageExtension) = explode('.', $this->image
->getFilename());
$this
->assertFileExists($this->image
->getFileUri());
$this->phpfile = current($this
->drupalGetTestFiles('php'));
$this
->assertFileExists($this->phpfile->uri);
$this->maxFidBefore = (int) \Drupal::entityQueryAggregate('file')
->aggregate('fid', 'max')
->execute()[0]['fid_max'];
$file_system = \Drupal::service('file_system');
$edit = [
'file_test_replace' => FileSystemInterface::EXISTS_REPLACE,
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
];
$this
->drupalPostForm('file-test/save_upload_from_form_test', $edit, t('Submit'));
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertRaw(t('You WIN!'), 'Found the success message.');
$this
->assertFileHooksCalled([
'validate',
'insert',
]);
file_test_reset();
}
public function testNormal() {
$max_fid_after = (int) \Drupal::entityQueryAggregate('file')
->aggregate('fid', 'max')
->execute()[0]['fid_max'];
$this
->assertTrue($max_fid_after > $this->maxFidBefore, 'A new file was created.');
$file1 = File::load($max_fid_after);
$this
->assertInstanceOf(File::class, $file1);
$this
->assertEqual(substr($file1
->getMimeType(), 0, 5), 'image', 'A MIME type was set.');
file_test_reset();
$image2 = current($this
->drupalGetTestFiles('image'));
$file_system = \Drupal::service('file_system');
$edit = [
'files[file_test_upload][]' => $file_system
->realpath($image2->uri),
];
$this
->drupalPostForm('file-test/save_upload_from_form_test', $edit, t('Submit'));
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertRaw(t('You WIN!'));
$max_fid_after = (int) \Drupal::entityQueryAggregate('file')
->aggregate('fid', 'max')
->execute()[0]['fid_max'];
$this
->assertFileHooksCalled([
'validate',
'insert',
]);
$file2 = File::load($max_fid_after);
$this
->assertInstanceOf(File::class, $file2);
$this
->assertEqual(substr($file2
->getMimeType(), 0, 5), 'image', 'A MIME type was set.');
$files = File::loadMultiple([
$file1
->id(),
$file2
->id(),
]);
$this
->assertTrue(isset($files[$file1
->id()]), 'File was loaded successfully');
$this
->assertTrue(isset($files[$file2
->id()]), 'File was loaded successfully');
$image3 = current($this
->drupalGetTestFiles('image'));
$image3_realpath = $file_system
->realpath($image3->uri);
$dir = $this
->randomMachineName();
$edit = [
'files[file_test_upload][]' => $image3_realpath,
'file_subdir' => $dir,
];
$this
->drupalPostForm('file-test/save_upload_from_form_test', $edit, t('Submit'));
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertRaw(t('You WIN!'));
$this
->assertFileExists('temporary://' . $dir . '/' . trim(\Drupal::service('file_system')
->basename($image3_realpath)));
}
public function testHandleExtension() {
$file_system = \Drupal::service('file_system');
$extensions = 'foo';
$edit = [
'file_test_replace' => FileSystemInterface::EXISTS_REPLACE,
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
'extensions' => $extensions,
];
$this
->drupalPostForm('file-test/save_upload_from_form_test', $edit, t('Submit'));
$this
->assertSession()
->statusCodeEquals(200);
$message = t('Only files with the following extensions are allowed:') . ' <em class="placeholder">' . $extensions . '</em>';
$this
->assertRaw($message, 'Cannot upload a disallowed extension');
$this
->assertRaw(t('Epic upload FAIL!'), 'Found the failure message.');
$this
->assertFileHooksCalled([
'validate',
]);
file_test_reset();
$extensions = 'foo ' . $this->imageExtension;
$edit = [
'file_test_replace' => FileSystemInterface::EXISTS_REPLACE,
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
'extensions' => $extensions,
];
$this
->drupalPostForm('file-test/save_upload_from_form_test', $edit, t('Submit'));
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertNoRaw(t('Only files with the following extensions are allowed:'), 'Can upload an allowed extension.');
$this
->assertRaw(t('You WIN!'), 'Found the success message.');
$this
->assertFileHooksCalled([
'validate',
'load',
'update',
]);
file_test_reset();
$edit = [
'file_test_replace' => FileSystemInterface::EXISTS_REPLACE,
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
'allow_all_extensions' => 'empty_array',
];
$this
->drupalPostForm('file-test/save_upload_from_form_test', $edit, t('Submit'));
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertNoRaw(t('Only files with the following extensions are allowed:'), 'Can upload any extension.');
$this
->assertRaw(t('You WIN!'), 'Found the success message.');
$this
->assertFileHooksCalled([
'validate',
'load',
'update',
]);
}
public function testHandleDangerousFile() {
$config = $this
->config('system.file');
$file_system = \Drupal::service('file_system');
$edit = [
'file_test_replace' => FileSystemInterface::EXISTS_REPLACE,
'files[file_test_upload][]' => $file_system
->realpath($this->phpfile->uri),
'is_image_file' => FALSE,
'extensions' => 'php',
];
$this
->drupalPostForm('file-test/save_upload_from_form_test', $edit, t('Submit'));
$this
->assertSession()
->statusCodeEquals(200);
$message = t('For security reasons, your upload has been renamed to') . ' <em class="placeholder">' . $this->phpfile->filename . '_.txt' . '</em>';
$this
->assertRaw($message, 'Dangerous file was renamed.');
$this
->assertRaw(t('File MIME type is text/plain.'), "Dangerous file's MIME type was changed.");
$this
->assertRaw(t('You WIN!'), 'Found the success message.');
$this
->assertFileHooksCalled([
'validate',
'insert',
]);
$config
->set('allow_insecure_uploads', 1)
->save();
file_test_reset();
$this
->drupalPostForm('file-test/save_upload_from_form_test', $edit, t('Submit'));
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertNoRaw(t('For security reasons, your upload has been renamed'), 'Found no security message.');
$this
->assertRaw(t('File name is @filename', [
'@filename' => $this->phpfile->filename,
]), 'Dangerous file was not renamed when insecure uploads is TRUE.');
$this
->assertRaw(t('You WIN!'), 'Found the success message.');
$this
->assertFileHooksCalled([
'validate',
'insert',
]);
$config
->set('allow_insecure_uploads', 0)
->save();
}
public function testHandleFileMunge() {
$file_system = \Drupal::service('file_system');
$this
->config('system.file')
->set('allow_insecure_uploads', 0)
->save();
$original_uri = $this->image
->getFileUri();
$this->image = file_move($this->image, $original_uri . '.foo.' . $this->imageExtension);
file_test_reset();
$extensions = $this->imageExtension;
$edit = [
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
'extensions' => $extensions,
];
$munged_filename = $this->image
->getFilename();
$munged_filename = substr($munged_filename, 0, strrpos($munged_filename, '.'));
$munged_filename .= '_.' . $this->imageExtension;
$this
->drupalPostForm('file-test/save_upload_from_form_test', $edit, t('Submit'));
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertRaw(t('For security reasons, your upload has been renamed'), 'Found security message.');
$this
->assertRaw(t('File name is @filename', [
'@filename' => $munged_filename,
]), 'File was successfully munged.');
$this
->assertRaw(t('You WIN!'), 'Found the success message.');
$this
->assertFileHooksCalled([
'validate',
'insert',
]);
$this->image = file_move($this->image, $original_uri . '.foo2.' . $this->imageExtension);
file_test_reset();
$extensions = $this->imageExtension;
$edit = [
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
'extensions' => mb_strtoupper($extensions),
];
$munged_filename = $this->image
->getFilename();
$munged_filename = substr($munged_filename, 0, strrpos($munged_filename, '.'));
$munged_filename .= '_.' . $this->imageExtension;
$this
->drupalPostForm('file-test/save_upload_from_form_test', $edit, t('Submit'));
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertRaw(t('For security reasons, your upload has been renamed'), 'Found security message.');
$this
->assertRaw(t('File name is @filename', [
'@filename' => $munged_filename,
]), 'File was successfully munged.');
$this
->assertRaw(t('You WIN!'), 'Found the success message.');
$this
->assertFileHooksCalled([
'validate',
'insert',
]);
file_test_reset();
$edit = [
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
'allow_all_extensions' => 'empty_array',
];
$this
->drupalPostForm('file-test/save_upload_from_form_test', $edit, t('Submit'));
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertNoRaw(t('For security reasons, your upload has been renamed'), 'Found no security message.');
$this
->assertRaw(t('File name is @filename', [
'@filename' => $this->image
->getFilename(),
]), 'File was not munged when allowing any extension.');
$this
->assertRaw(t('You WIN!'), 'Found the success message.');
$this
->assertFileHooksCalled([
'validate',
'insert',
]);
file_test_reset();
$edit = [
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
'allow_all_extensions' => 'empty_string',
];
$this
->drupalPostForm('file-test/save_upload_from_form_test', $edit, t('Submit'));
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertNoRaw(t('For security reasons, your upload has been renamed'), 'Found security message.');
$this
->assertRaw(t('Epic upload FAIL!'), 'Found the failure message.');
$this
->assertFileHooksCalled([
'validate',
]);
}
public function testExistingRename() {
$file_system = \Drupal::service('file_system');
$edit = [
'file_test_replace' => FileSystemInterface::EXISTS_RENAME,
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
];
$this
->drupalPostForm('file-test/save_upload_from_form_test', $edit, t('Submit'));
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertRaw(t('You WIN!'), 'Found the success message.');
$this
->assertFileHooksCalled([
'validate',
'insert',
]);
}
public function testExistingReplace() {
$file_system = \Drupal::service('file_system');
$edit = [
'file_test_replace' => FileSystemInterface::EXISTS_REPLACE,
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
];
$this
->drupalPostForm('file-test/save_upload_from_form_test', $edit, t('Submit'));
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertRaw(t('You WIN!'), 'Found the success message.');
$this
->assertFileHooksCalled([
'validate',
'load',
'update',
]);
}
public function testExistingError() {
$file_system = \Drupal::service('file_system');
$edit = [
'file_test_replace' => FileSystemInterface::EXISTS_ERROR,
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
];
$this
->drupalPostForm('file-test/save_upload_from_form_test', $edit, t('Submit'));
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertRaw(t('Epic upload FAIL!'), 'Found the failure message.');
$this
->assertFileHooksCalled([]);
}
public function testNoUpload() {
$this
->drupalPostForm('file-test/save_upload_from_form_test', [], t('Submit'));
$this
->assertNoRaw(t('Epic upload FAIL!'), 'Failure message not found.');
}
public function testDrupalMovingUploadedFileError() {
$test_directory = 'test_drupal_move_uploaded_file_fail';
\Drupal::service('file_system')
->mkdir('temporary://' . $test_directory, 00);
$this
->assertDirectoryExists('temporary://' . $test_directory);
$file_system = \Drupal::service('file_system');
$edit = [
'file_subdir' => $test_directory,
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
];
\Drupal::state()
->set('file_test.disable_error_collection', TRUE);
$this
->drupalPostForm('file-test/save_upload_from_form_test', $edit, t('Submit'));
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertRaw(t('File upload error. Could not move uploaded file.'), 'Found the failure message.');
$this
->assertRaw(t('Epic upload FAIL!'), 'Found the failure message.');
$this
->drupalGet('admin/reports/dblog');
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertRaw(t('Upload error. Could not move uploaded file @file to destination @destination.', [
'@file' => $this->image
->getFilename(),
'@destination' => 'temporary://' . $test_directory . '/' . $this->image
->getFilename(),
]), 'Found upload error log entry.');
}
public function testErrorMessagesAreNotChanged() {
$error = 'An error message set before _file_save_upload_from_form()';
$file_system = \Drupal::service('file_system');
$edit = [
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
'error_message' => $error,
];
$this
->drupalPostForm('file-test/save_upload_from_form_test', $edit, t('Submit'));
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertRaw(t('You WIN!'), 'Found the success message.');
$this
->assertText($error);
$this
->assertRaw('Number of error messages before _file_save_upload_from_form(): 1');
$this
->assertRaw('Number of error messages after _file_save_upload_from_form(): 1');
$edit = [
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
'error_message' => $error,
'extensions' => 'foo',
];
$this
->drupalPostForm('file-test/save_upload_from_form_test', $edit, t('Submit'));
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertRaw(t('Epic upload FAIL!'), 'Found the failure message.');
$this
->assertText($error);
$this
->assertRaw('Number of error messages before _file_save_upload_from_form(): 1');
$this
->assertRaw('Number of error messages after _file_save_upload_from_form(): 1');
$edit = [
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
];
$this
->drupalPostForm('file-test/save_upload_from_form_test', $edit, t('Submit'));
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertRaw(t('You WIN!'), 'Found the success message.');
$this
->assertNoText($error);
$this
->assertRaw('Number of error messages before _file_save_upload_from_form(): 0');
$this
->assertRaw('Number of error messages after _file_save_upload_from_form(): 0');
}
public function testCombinedErrorMessages() {
$textfile = current($this
->drupalGetTestFiles('text'));
$this
->assertFileExists($textfile->uri);
$file_system = \Drupal::service('file_system');
$this
->drupalGet('file-test/save_upload_from_form_test');
$client = $this
->getSession()
->getDriver()
->getClient();
$submit_xpath = $this
->assertSession()
->buttonExists('Submit')
->getXpath();
$form = $client
->getCrawler()
->filterXPath($submit_xpath)
->form();
$edit = [
'is_image_file' => TRUE,
'extensions' => 'jpeg',
];
$edit += $form
->getPhpValues();
$files['files']['file_test_upload'][0] = $file_system
->realpath($this->phpfile->uri);
$files['files']['file_test_upload'][1] = $file_system
->realpath($textfile->uri);
$client
->request($form
->getMethod(), $form
->getUri(), $edit, $files);
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertRaw(t('Epic upload FAIL!'), 'Found the failure message.');
$this
->assertRaw(t('One or more files could not be uploaded.') . '<div class="item-list">', 'Error message contains combined list of validation errors.');
}
public function testUploadFieldIsHighlighted() {
$this
->assertCount(0, $this
->cssSelect('input[name="files[file_test_upload][]"].error'), 'Successful file upload has no error.');
$file_system = \Drupal::service('file_system');
$edit = [
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
'extensions' => 'foo',
];
$this
->drupalPostForm('file-test/save_upload_from_form_test', $edit, t('Submit'));
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertRaw(t('Epic upload FAIL!'), 'Found the failure message.');
$this
->assertCount(1, $this
->cssSelect('input[name="files[file_test_upload][]"].error'), 'File upload field has error.');
}
}