View source
<?php
namespace Drupal\restful\Plugin\resource\DataProvider;
use Drupal\restful\Exception\BadRequestException;
use Drupal\restful\Exception\ForbiddenException;
use Drupal\restful\Exception\ServiceUnavailableException;
use Drupal\restful\Http\RequestInterface;
use Drupal\restful\Plugin\resource\Field\ResourceFieldCollectionInterface;
class DataProviderFile extends DataProviderEntity implements DataProviderInterface {
public function __construct(RequestInterface $request, ResourceFieldCollectionInterface $field_definitions, $account, $plugin_id, $resource_path, array $options, $langcode = NULL) {
parent::__construct($request, $field_definitions, $account, $plugin_id, $resource_path, $options, $langcode);
$file_options = empty($this->options['options']) ? array() : $this->options['options'];
$default_values = array(
'validators' => array(
'file_validate_extensions' => array(),
'file_validate_size' => array(),
),
'scheme' => file_default_scheme(),
'replace' => FILE_EXISTS_RENAME,
);
$this->options['options'] = drupal_array_merge_deep($default_values, $file_options);
}
public function create($object) {
$files = $this
->getRequest()
->getFiles();
if (!$files) {
throw new BadRequestException('No files sent with the request.');
}
$ids = array();
foreach ($files as $file_info) {
$name = $file_info['name'];
foreach ($file_info as $key => $value) {
$files['files'][$key][$name] = $value;
}
if (!($file = $this
->fileSaveUpload($name, $files))) {
throw new BadRequestException('Unacceptable file sent with the request.');
}
file_usage_add($file, 'restful', 'files', $file->fid);
$ids[] = $file->fid;
}
$return = array();
foreach ($ids as $id) {
$old_request = $this
->getRequest();
$this
->getRequest()
->setMethod(RequestInterface::METHOD_GET);
try {
$return[] = array(
$this
->view($id),
);
} catch (ForbiddenException $e) {
}
$this->request = $old_request;
}
return $return;
}
protected function fileSaveUpload($source, array $files) {
static $upload_cache;
$provider_options = $this
->getOptions();
$options = $provider_options['options'];
$validators = empty($options['validators']) ? NULL : $options['validators'];
$destination = $options['scheme'] . "://";
$replace = empty($options['replace']) ? NULL : $options['replace'];
if (isset($upload_cache[$source])) {
return $upload_cache[$source];
}
if (empty($files['files']['name'][$source])) {
return NULL;
}
$this
->checkUploadErrors($source, $files);
$file_array = array(
'uid' => $this
->getAccount()->uid,
'status' => 0,
'filename' => trim(drupal_basename($files['files']['name'][$source]), '.'),
'uri' => $files['files']['tmp_name'][$source],
'filesize' => $files['files']['size'][$source],
);
$file_array['filemime'] = file_get_mimetype($file_array['filename']);
$file = (object) $file_array;
$extensions = '';
if (isset($validators['file_validate_extensions'])) {
if (isset($validators['file_validate_extensions'][0])) {
$extensions = $validators['file_validate_extensions'][0];
}
else {
unset($validators['file_validate_extensions']);
}
}
else {
$extensions = 'jpg jpeg gif png txt doc xls pdf ppt pps odt ods odp';
$validators['file_validate_extensions'] = array();
$validators['file_validate_extensions'][0] = $extensions;
}
if (!empty($extensions)) {
$file->filename = file_munge_filename($file->filename, $extensions);
}
if (!variable_get('allow_insecure_uploads', 0) && preg_match('/\\.(php|pl|py|cgi|asp|js)(\\.|$)/i', $file->filename) && substr($file->filename, -4) != '.txt') {
$file->filemime = 'text/plain';
$file->uri .= '.txt';
$file->filename .= '.txt';
if (!empty($extensions)) {
$validators['file_validate_extensions'][0] .= ' txt';
}
}
if (empty($destination)) {
$destination = 'temporary://';
}
$destination_scheme = file_uri_scheme($destination);
if (!$destination_scheme || !file_stream_wrapper_valid_scheme($destination_scheme)) {
$message = format_string('The file could not be uploaded, because the destination %destination is invalid.', array(
'%destination' => $destination,
));
throw new ServiceUnavailableException($message);
}
$file->source = $source;
if (substr($destination, -1) != '/') {
$destination .= '/';
}
$file->destination = file_destination($destination . $file->filename, $replace);
if ($file->destination === FALSE) {
$message = format_string('The file %source could not be uploaded because a file by that name already exists in the destination %directory.', array(
'%source' => $source,
'%directory' => $destination,
));
throw new ServiceUnavailableException($message);
}
$validators['file_validate_name_length'] = array();
$errors = file_validate($file, $validators);
if (!empty($errors)) {
$message = format_string('The specified file %name could not be uploaded.', array(
'%name' => $file->filename,
));
if (count($errors) > 1) {
$message .= theme('item_list', array(
'items' => $errors,
));
}
else {
$message .= ' ' . array_pop($errors);
}
throw new ServiceUnavailableException($message);
}
$file->uri = $file->destination;
if (!$this::moveUploadedFile($files['files']['tmp_name'][$source], $file->uri)) {
watchdog('file', 'Upload error. Could not move uploaded file %file to destination %destination.', array(
'%file' => $file->filename,
'%destination' => $file->uri,
));
$message = 'File upload error. Could not move uploaded file.';
throw new ServiceUnavailableException($message);
}
drupal_chmod($file->uri);
if ($replace == FILE_EXISTS_REPLACE) {
$existing_files = file_load_multiple(array(), array(
'uri' => $file->uri,
));
if (count($existing_files)) {
$existing = reset($existing_files);
$file->fid = $existing->fid;
}
}
$file->status = FILE_STATUS_PERMANENT;
if ($file = file_save($file)) {
$upload_cache[$source] = $file;
return $file;
}
throw new ServiceUnavailableException('Unknown error has occurred.');
}
protected function checkUploadErrors($source, array $files) {
switch ($files['files']['error'][$source]) {
case UPLOAD_ERR_INI_SIZE:
case UPLOAD_ERR_FORM_SIZE:
$message = format_string('The file %file could not be saved, because it exceeds %maxsize, the maximum allowed size for uploads.', array(
'%file' => $files['files']['name'][$source],
'%maxsize' => format_size(file_upload_max_size()),
));
throw new BadRequestException($message);
case UPLOAD_ERR_PARTIAL:
case UPLOAD_ERR_NO_FILE:
$message = format_string('The file %file could not be saved, because the upload did not complete.', array(
'%file' => $files['files']['name'][$source],
));
throw new BadRequestException($message);
case UPLOAD_ERR_OK:
if ($this::isUploadedFile($files['files']['tmp_name'][$source])) {
break;
}
default:
$message = format_string('The file %file could not be saved. An unknown error has occurred.', array(
'%file' => $files['files']['name'][$source],
));
throw new ServiceUnavailableException($message);
}
}
protected static function isUploadedFile($filename) {
return is_uploaded_file($filename);
}
protected static function moveUploadedFile($filename, $uri) {
return (bool) drupal_move_uploaded_file($filename, $uri);
}
}