View source
<?php
namespace Drupal\Tests\file\Functional;
use Drupal\Core\File\FileSystemInterface;
use Drupal\file\Entity\File;
use Drupal\Tests\TestFileCreationTrait;
class SaveUploadFormTest extends FileManagedTestBase {
use TestFileCreationTrait {
getTestFiles as drupalGetTestFiles;
}
protected static $modules = [
'dblog',
];
protected $defaultTheme = 'classy';
protected $image;
protected $phpfile;
protected $maxFidBefore;
protected $imageExtension;
protected function setUp() : void {
parent::setUp();
$account = $this
->drupalCreateUser([
'access site reports',
]);
$this
->drupalLogin($account);
$image_files = $this
->drupalGetTestFiles('image');
$this->image = File::create((array) current($image_files));
list(, $this->imageExtension) = explode('.', $this->image
->getFilename());
$this
->assertFileExists($this->image
->getFileUri());
$this->phpfile = current($this
->drupalGetTestFiles('php'));
$this
->assertFileExists($this->phpfile->uri);
$this->maxFidBefore = (int) \Drupal::entityQueryAggregate('file')
->accessCheck(FALSE)
->aggregate('fid', 'max')
->execute()[0]['fid_max'];
$file_system = \Drupal::service('file_system');
$edit = [
'file_test_replace' => FileSystemInterface::EXISTS_REPLACE,
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
];
$this
->drupalGet('file-test/save_upload_from_form_test');
$this
->submitForm($edit, 'Submit');
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertSession()
->pageTextContains("You WIN!");
$this
->assertFileHooksCalled([
'validate',
'insert',
]);
file_test_reset();
}
public function testNormal() {
$max_fid_after = (int) \Drupal::entityQueryAggregate('file')
->accessCheck(FALSE)
->aggregate('fid', 'max')
->execute()[0]['fid_max'];
$this
->assertGreaterThan($this->maxFidBefore, $max_fid_after);
$file1 = File::load($max_fid_after);
$this
->assertInstanceOf(File::class, $file1);
$this
->assertEquals('image', substr($file1
->getMimeType(), 0, 5), 'A MIME type was set.');
file_test_reset();
$image2 = current($this
->drupalGetTestFiles('image'));
$file_system = \Drupal::service('file_system');
$edit = [
'files[file_test_upload][]' => $file_system
->realpath($image2->uri),
];
$this
->drupalGet('file-test/save_upload_from_form_test');
$this
->submitForm($edit, 'Submit');
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertSession()
->pageTextContains("You WIN!");
$max_fid_after = (int) \Drupal::entityQueryAggregate('file')
->accessCheck(FALSE)
->aggregate('fid', 'max')
->execute()[0]['fid_max'];
$this
->assertFileHooksCalled([
'validate',
'insert',
]);
$file2 = File::load($max_fid_after);
$this
->assertInstanceOf(File::class, $file2);
$this
->assertEquals('image', substr($file2
->getMimeType(), 0, 5), 'A MIME type was set.');
$files = File::loadMultiple([
$file1
->id(),
$file2
->id(),
]);
$this
->assertTrue(isset($files[$file1
->id()]), 'File was loaded successfully');
$this
->assertTrue(isset($files[$file2
->id()]), 'File was loaded successfully');
$image3 = current($this
->drupalGetTestFiles('image'));
$image3_realpath = $file_system
->realpath($image3->uri);
$dir = $this
->randomMachineName();
$edit = [
'files[file_test_upload][]' => $image3_realpath,
'file_subdir' => $dir,
];
$this
->drupalGet('file-test/save_upload_from_form_test');
$this
->submitForm($edit, 'Submit');
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertSession()
->pageTextContains("You WIN!");
$this
->assertFileExists('temporary://' . $dir . '/' . trim(\Drupal::service('file_system')
->basename($image3_realpath)));
}
public function testHandleExtension() {
$file_system = \Drupal::service('file_system');
$extensions = 'foo';
$edit = [
'file_test_replace' => FileSystemInterface::EXISTS_REPLACE,
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
'extensions' => $extensions,
];
$this
->drupalGet('file-test/save_upload_from_form_test');
$this
->submitForm($edit, 'Submit');
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertSession()
->responseContains('Only files with the following extensions are allowed: <em class="placeholder">' . $extensions . '</em>');
$this
->assertSession()
->pageTextContains("Epic upload FAIL!");
$this
->assertFileHooksCalled([
'validate',
]);
file_test_reset();
$extensions = 'foo ' . $this->imageExtension;
$edit = [
'file_test_replace' => FileSystemInterface::EXISTS_REPLACE,
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
'extensions' => $extensions,
];
$this
->drupalGet('file-test/save_upload_from_form_test');
$this
->submitForm($edit, 'Submit');
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertSession()
->pageTextNotContains('Only files with the following extensions are allowed:');
$this
->assertSession()
->pageTextContains("You WIN!");
$this
->assertFileHooksCalled([
'validate',
'load',
'update',
]);
file_test_reset();
$edit = [
'file_test_replace' => FileSystemInterface::EXISTS_REPLACE,
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
'allow_all_extensions' => 'empty_array',
];
$this
->drupalGet('file-test/save_upload_from_form_test');
$this
->submitForm($edit, 'Submit');
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertSession()
->pageTextNotContains('Only files with the following extensions are allowed:');
$this
->assertSession()
->pageTextContains("You WIN!");
$this
->assertFileHooksCalled([
'validate',
'load',
'update',
]);
}
public function testHandleDangerousFile() {
$config = $this
->config('system.file');
$file_system = \Drupal::service('file_system');
$edit = [
'file_test_replace' => FileSystemInterface::EXISTS_REPLACE,
'files[file_test_upload][]' => $file_system
->realpath($this->phpfile->uri),
'is_image_file' => FALSE,
'extensions' => 'php txt',
];
$this
->drupalGet('file-test/save_upload_from_form_test');
$this
->submitForm($edit, 'Submit');
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertSession()
->responseContains('For security reasons, your upload has been renamed to <em class="placeholder">' . $this->phpfile->filename . '_.txt' . '</em>');
$this
->assertSession()
->pageTextContains('File MIME type is text/plain.');
$this
->assertSession()
->pageTextContains("You WIN!");
$this
->assertFileHooksCalled([
'validate',
'insert',
]);
$config
->set('allow_insecure_uploads', 1)
->save();
file_test_reset();
$this
->drupalGet('file-test/save_upload_from_form_test');
$this
->submitForm($edit, 'Submit');
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertSession()
->pageTextNotContains('For security reasons, your upload has been renamed');
$this
->assertSession()
->pageTextContains("File name is {$this->phpfile->filename}");
$this
->assertSession()
->pageTextContains("You WIN!");
$this
->assertFileHooksCalled([
'validate',
'insert',
]);
$config
->set('allow_insecure_uploads', 0)
->save();
file_test_reset();
$edit = [
'file_test_replace' => FileSystemInterface::EXISTS_REPLACE,
'files[file_test_upload]' => \Drupal::service('file_system')
->realpath($this->phpfile->uri),
'is_image_file' => FALSE,
'extensions' => 'php',
];
$this
->drupalGet('file-test/upload');
$this
->submitForm($edit, 'Submit');
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertSession()
->pageTextContains('For security reasons, your upload has been rejected.');
$this
->assertSession()
->pageTextContains('Epic upload FAIL!');
$this
->assertFileHooksCalled([
'validate',
]);
}
public function testHandleFileMunge() {
$file_system = \Drupal::service('file_system');
$this
->config('system.file')
->set('allow_insecure_uploads', 0)
->save();
$original_uri = $this->image
->getFileUri();
$this->image = file_move($this->image, $original_uri . '.foo.' . $this->imageExtension);
file_test_reset();
$extensions = $this->imageExtension;
$edit = [
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
'extensions' => $extensions,
];
$munged_filename = $this->image
->getFilename();
$munged_filename = substr($munged_filename, 0, strrpos($munged_filename, '.'));
$munged_filename .= '_.' . $this->imageExtension;
$this
->drupalGet('file-test/save_upload_from_form_test');
$this
->submitForm($edit, 'Submit');
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertSession()
->pageTextContains('For security reasons, your upload has been renamed');
$this
->assertSession()
->pageTextContains("File name is {$munged_filename}");
$this
->assertSession()
->pageTextContains("You WIN!");
$this
->assertFileHooksCalled([
'validate',
'insert',
]);
$this->image = file_move($this->image, $original_uri . '.foo2.' . $this->imageExtension);
file_test_reset();
$extensions = $this->imageExtension;
$edit = [
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
'extensions' => mb_strtoupper($extensions),
];
$munged_filename = $this->image
->getFilename();
$munged_filename = substr($munged_filename, 0, strrpos($munged_filename, '.'));
$munged_filename .= '_.' . $this->imageExtension;
$this
->drupalGet('file-test/save_upload_from_form_test');
$this
->submitForm($edit, 'Submit');
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertSession()
->pageTextContains('For security reasons, your upload has been renamed');
$this
->assertSession()
->pageTextContains("File name is {$munged_filename}");
$this
->assertSession()
->pageTextContains("You WIN!");
$this
->assertFileHooksCalled([
'validate',
'insert',
]);
file_test_reset();
$edit = [
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
'allow_all_extensions' => 'empty_array',
];
$this
->drupalGet('file-test/save_upload_from_form_test');
$this
->submitForm($edit, 'Submit');
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertSession()
->pageTextNotContains('For security reasons, your upload has been renamed');
$this
->assertSession()
->pageTextContains("File name is {$this->image->getFilename()}");
$this
->assertSession()
->pageTextContains("You WIN!");
$this
->assertFileHooksCalled([
'validate',
'insert',
]);
file_test_reset();
$edit = [
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
'allow_all_extensions' => 'empty_string',
];
$this
->drupalGet('file-test/save_upload_from_form_test');
$this
->submitForm($edit, 'Submit');
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertSession()
->pageTextNotContains('For security reasons, your upload has been renamed');
$this
->assertSession()
->pageTextContains("Epic upload FAIL!");
$this
->assertFileHooksCalled([
'validate',
]);
}
public function testExistingRename() {
$file_system = \Drupal::service('file_system');
$edit = [
'file_test_replace' => FileSystemInterface::EXISTS_RENAME,
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
];
$this
->drupalGet('file-test/save_upload_from_form_test');
$this
->submitForm($edit, 'Submit');
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertSession()
->pageTextContains("You WIN!");
$this
->assertFileHooksCalled([
'validate',
'insert',
]);
}
public function testExistingReplace() {
$file_system = \Drupal::service('file_system');
$edit = [
'file_test_replace' => FileSystemInterface::EXISTS_REPLACE,
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
];
$this
->drupalGet('file-test/save_upload_from_form_test');
$this
->submitForm($edit, 'Submit');
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertSession()
->pageTextContains("You WIN!");
$this
->assertFileHooksCalled([
'validate',
'load',
'update',
]);
}
public function testExistingError() {
$file_system = \Drupal::service('file_system');
$edit = [
'file_test_replace' => FileSystemInterface::EXISTS_ERROR,
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
];
$this
->drupalGet('file-test/save_upload_from_form_test');
$this
->submitForm($edit, 'Submit');
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertSession()
->pageTextContains("Epic upload FAIL!");
$this
->assertFileHooksCalled([]);
}
public function testNoUpload() {
$this
->drupalGet('file-test/save_upload_from_form_test');
$this
->submitForm([], 'Submit');
$this
->assertSession()
->pageTextNotContains("Epic upload FAIL!");
}
public function testDrupalMovingUploadedFileError() {
$test_directory = 'test_drupal_move_uploaded_file_fail';
\Drupal::service('file_system')
->mkdir('temporary://' . $test_directory, 00);
$this
->assertDirectoryExists('temporary://' . $test_directory);
$file_system = \Drupal::service('file_system');
$edit = [
'file_subdir' => $test_directory,
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
];
\Drupal::state()
->set('file_test.disable_error_collection', TRUE);
$this
->drupalGet('file-test/save_upload_from_form_test');
$this
->submitForm($edit, 'Submit');
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertSession()
->pageTextContains('File upload error. Could not move uploaded file.');
$this
->assertSession()
->pageTextContains("Epic upload FAIL!");
$this
->drupalGet('admin/reports/dblog');
$this
->assertSession()
->statusCodeEquals(200);
$destination = 'temporary://' . $test_directory . '/' . $this->image
->getFilename();
$this
->assertSession()
->responseContains("Upload error. Could not move uploaded file {$this->image->getFilename()} to destination {$destination}.");
}
public function testErrorMessagesAreNotChanged() {
$error = 'An error message set before _file_save_upload_from_form()';
$file_system = \Drupal::service('file_system');
$edit = [
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
'error_message' => $error,
];
$this
->drupalGet('file-test/save_upload_from_form_test');
$this
->submitForm($edit, 'Submit');
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertSession()
->pageTextContains("You WIN!");
$this
->assertSession()
->pageTextContains($error);
$this
->assertSession()
->pageTextContains('Number of error messages before _file_save_upload_from_form(): 1');
$this
->assertSession()
->pageTextContains('Number of error messages after _file_save_upload_from_form(): 1');
$edit = [
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
'error_message' => $error,
'extensions' => 'foo',
];
$this
->drupalGet('file-test/save_upload_from_form_test');
$this
->submitForm($edit, 'Submit');
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertSession()
->pageTextContains("Epic upload FAIL!");
$this
->assertSession()
->pageTextContains($error);
$this
->assertSession()
->pageTextContains('Number of error messages before _file_save_upload_from_form(): 1');
$this
->assertSession()
->pageTextContains('Number of error messages after _file_save_upload_from_form(): 1');
$edit = [
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
];
$this
->drupalGet('file-test/save_upload_from_form_test');
$this
->submitForm($edit, 'Submit');
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertSession()
->pageTextContains("You WIN!");
$this
->assertSession()
->pageTextNotContains($error);
$this
->assertSession()
->pageTextContains('Number of error messages before _file_save_upload_from_form(): 0');
$this
->assertSession()
->pageTextContains('Number of error messages after _file_save_upload_from_form(): 0');
}
public function testCombinedErrorMessages() {
$textfile = current($this
->drupalGetTestFiles('text'));
$this
->assertFileExists($textfile->uri);
$file_system = \Drupal::service('file_system');
$this
->drupalGet('file-test/save_upload_from_form_test');
$client = $this
->getSession()
->getDriver()
->getClient();
$submit_xpath = $this
->assertSession()
->buttonExists('Submit')
->getXpath();
$form = $client
->getCrawler()
->filterXPath($submit_xpath)
->form();
$edit = [
'is_image_file' => TRUE,
'extensions' => 'jpeg',
];
$edit += $form
->getPhpValues();
$files['files']['file_test_upload'][0] = $file_system
->realpath($this->phpfile->uri);
$files['files']['file_test_upload'][1] = $file_system
->realpath($textfile->uri);
$client
->request($form
->getMethod(), $form
->getUri(), $edit, $files);
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertSession()
->pageTextContains("Epic upload FAIL!");
$this
->assertSession()
->responseContains('One or more files could not be uploaded.<div class="item-list">');
}
public function testUploadFieldIsHighlighted() {
$this
->assertCount(0, $this
->cssSelect('input[name="files[file_test_upload][]"].error'), 'Successful file upload has no error.');
$file_system = \Drupal::service('file_system');
$edit = [
'files[file_test_upload][]' => $file_system
->realpath($this->image
->getFileUri()),
'extensions' => 'foo',
];
$this
->drupalGet('file-test/save_upload_from_form_test');
$this
->submitForm($edit, 'Submit');
$this
->assertSession()
->statusCodeEquals(200);
$this
->assertSession()
->pageTextContains("Epic upload FAIL!");
$this
->assertCount(1, $this
->cssSelect('input[name="files[file_test_upload][]"].error'), 'File upload field has error.');
}
}