File.php 34 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871
  1. <?php
  2. /**
  3. * GNU social - a federating social network
  4. *
  5. * Abstraction for files
  6. *
  7. * LICENCE: This program is free software: you can redistribute it and/or modify
  8. * it under the terms of the GNU Affero General Public License as published by
  9. * the Free Software Foundation, either version 3 of the License, or
  10. * (at your option) any later version.
  11. *
  12. * This program is distributed in the hope that it will be useful,
  13. * but WITHOUT ANY WARRANTY; without even the implied warranty of
  14. * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  15. * GNU Affero General Public License for more details.
  16. *
  17. * You should have received a copy of the GNU Affero General Public License
  18. * along with this program. If not, see <http://www.gnu.org/licenses/>.
  19. *
  20. * @category Files
  21. * @package GNUsocial
  22. * @author Mikael Nordfeldth <mmn@hethane.se>
  23. * @author Miguel Dantas <biodantas@gmail.com>
  24. * @copyright 2008-2009, 2019 Free Software Foundation http://fsf.org
  25. * @license http://www.fsf.org/licensing/licenses/agpl-3.0.html GNU Affero General Public License version 3.0
  26. * @link https://www.gnu.org/software/social/
  27. */
  28. defined('GNUSOCIAL') || die();
  29. /**
  30. * Table Definition for file
  31. */
  32. class File extends Managed_DataObject
  33. {
  34. public $__table = 'file'; // table name
  35. public $id; // int(4) primary_key not_null
  36. public $urlhash; // varchar(64) unique_key
  37. public $url; // text
  38. public $filehash; // varchar(64) indexed
  39. public $mimetype; // varchar(50)
  40. public $size; // int(4)
  41. public $title; // text()
  42. public $date; // int(4)
  43. public $protected; // int(4)
  44. public $filename; // text()
  45. public $width; // int(4)
  46. public $height; // int(4)
  47. public $modified; // timestamp() not_null default_CURRENT_TIMESTAMP
  48. const URLHASH_ALG = 'sha256';
  49. const FILEHASH_ALG = 'sha256';
  50. public static function schemaDef()
  51. {
  52. return array(
  53. 'fields' => array(
  54. 'id' => array('type' => 'serial', 'not null' => true),
  55. 'urlhash' => array('type' => 'varchar', 'length' => 64, 'not null' => true, 'description' => 'sha256 of destination URL (url field)'),
  56. 'url' => array('type' => 'text', 'description' => 'destination URL after following possible redirections'),
  57. 'filehash' => array('type' => 'varchar', 'length' => 64, 'not null' => false, 'description' => 'sha256 of the file contents, only for locally stored files of course'),
  58. 'mimetype' => array('type' => 'varchar', 'length' => 50, 'description' => 'mime type of resource'),
  59. 'size' => array('type' => 'int', 'description' => 'size of resource when available'),
  60. 'title' => array('type' => 'text', 'description' => 'title of resource when available'),
  61. 'date' => array('type' => 'int', 'description' => 'date of resource according to http query'),
  62. 'protected' => array('type' => 'int', 'description' => 'true when URL is private (needs login)'),
  63. 'filename' => array('type' => 'text', 'description' => 'if file is stored locally (too) this is the filename'),
  64. 'width' => array('type' => 'int', 'description' => 'width in pixels, if it can be described as such and data is available'),
  65. 'height' => array('type' => 'int', 'description' => 'height in pixels, if it can be described as such and data is available'),
  66. 'modified' => array('type' => 'timestamp', 'not null' => true, 'description' => 'date this record was modified'),
  67. ),
  68. 'primary key' => array('id'),
  69. 'unique keys' => array(
  70. 'file_urlhash_key' => array('urlhash'),
  71. ),
  72. 'indexes' => array(
  73. 'file_filehash_idx' => array('filehash'),
  74. ),
  75. );
  76. }
  77. public static function isProtected($url)
  78. {
  79. $protected_urls_exps = array(
  80. 'https://www.facebook.com/login.php',
  81. common_path('main/login')
  82. );
  83. foreach ($protected_urls_exps as $protected_url_exp) {
  84. if (preg_match('!^'.preg_quote($protected_url_exp).'(.*)$!i', $url) === 1) {
  85. return true;
  86. }
  87. }
  88. return false;
  89. }
  90. /**
  91. * Save a new file record.
  92. *
  93. * @param array $redir_data lookup data eg from File_redirection::where()
  94. * @param string $given_url
  95. * @return File
  96. * @throws ServerException
  97. */
  98. public static function saveNew(array $redir_data, $given_url)
  99. {
  100. $file = null;
  101. try {
  102. // I don't know why we have to keep doing this but we run a last check to avoid
  103. // uniqueness bugs.
  104. $file = File::getByUrl($given_url);
  105. return $file;
  106. } catch (NoResultException $e) {
  107. // We don't have the file's URL since before, so let's continue.
  108. }
  109. // if the given url is an local attachment url and the id already exists, don't
  110. // save a new file record. This should never happen, but let's make it foolproof
  111. // FIXME: how about attachments servers?
  112. $u = parse_url($given_url);
  113. if (isset($u['host']) && $u['host'] === common_config('site', 'server')) {
  114. $r = Router::get();
  115. // Skip the / in the beginning or $r->map won't match
  116. try {
  117. $args = $r->map(mb_substr($u['path'], 1));
  118. if ($args['action'] === 'attachment') {
  119. try {
  120. // $args['attachment'] should always be set if action===attachment, given our routing rules
  121. $file = File::getByID($args['attachment']);
  122. return $file;
  123. } catch (EmptyPkeyValueException $e) {
  124. // ...but $args['attachment'] can also be 0...
  125. } catch (NoResultException $e) {
  126. // apparently this link goes to us, but is _not_ an existing attachment (File) ID?
  127. }
  128. }
  129. } catch (Exception $e) {
  130. // Some other exception was thrown from $r->map, likely a
  131. // ClientException (404) because of some malformed link to
  132. // our own instance. It's still a valid URL however, so we
  133. // won't abort anything... I noticed this when linking:
  134. // https://social.umeahackerspace.se/mmn/foaf' (notice the
  135. // apostrophe in the end, making it unrecognizable for our
  136. // URL routing.
  137. // That specific issue (the apostrophe being part of a link
  138. // is something that may or may not have been fixed since,
  139. // in lib/util.php in common_replace_urls_callback().
  140. }
  141. }
  142. $file = new File;
  143. $file->url = $given_url;
  144. if (!empty($redir_data['protected'])) {
  145. $file->protected = $redir_data['protected'];
  146. }
  147. if (!empty($redir_data['title'])) {
  148. $file->title = $redir_data['title'];
  149. }
  150. if (!empty($redir_data['type'])) {
  151. $file->mimetype = $redir_data['type'];
  152. }
  153. if (!empty($redir_data['size'])) {
  154. $file->size = intval($redir_data['size']);
  155. }
  156. if (isset($redir_data['time']) && $redir_data['time'] > 0) {
  157. $file->date = intval($redir_data['time']);
  158. }
  159. $file->saveFile();
  160. return $file;
  161. }
  162. public function saveFile()
  163. {
  164. $this->urlhash = self::hashurl($this->url);
  165. if (!Event::handle('StartFileSaveNew', array(&$this))) {
  166. throw new ServerException('File not saved due to an aborted StartFileSaveNew event.');
  167. }
  168. $this->id = $this->insert();
  169. if ($this->id === false) {
  170. throw new ServerException('File/URL metadata could not be saved to the database.');
  171. }
  172. Event::handle('EndFileSaveNew', array($this));
  173. }
  174. /**
  175. * Go look at a URL and possibly save data about it if it's new:
  176. * - follow redirect chains and store them in file_redirection
  177. * - if a thumbnail is available, save it in file_thumbnail
  178. * - save file record with basic info
  179. * - optionally save a file_to_post record
  180. * - return the File object with the full reference
  181. *
  182. * @param string $given_url the URL we're looking at
  183. * @param Notice $notice (optional)
  184. * @param bool $followRedirects defaults to true
  185. *
  186. * @return mixed File on success, -1 on some errors
  187. *
  188. * @throws ServerException on failure
  189. */
  190. public static function processNew($given_url, Notice $notice=null, $followRedirects=true)
  191. {
  192. if (empty($given_url)) {
  193. throw new ServerException('No given URL to process');
  194. }
  195. $given_url = File_redirection::_canonUrl($given_url);
  196. if (empty($given_url)) {
  197. throw new ServerException('No canonical URL from given URL to process');
  198. }
  199. $redir = File_redirection::where($given_url);
  200. try {
  201. $file = $redir->getFile();
  202. } catch (EmptyPkeyValueException $e) {
  203. common_log(LOG_ERR, 'File_redirection::where gave object with empty file_id for given_url '._ve($given_url));
  204. throw new ServerException('URL processing failed without new File object');
  205. } catch (NoResultException $e) {
  206. // This should not happen
  207. common_log(LOG_ERR, 'File_redirection after discovery could still not return a File object.');
  208. throw new ServerException('URL processing failed without new File object');
  209. }
  210. if ($notice instanceof Notice) {
  211. File_to_post::processNew($file, $notice);
  212. }
  213. return $file;
  214. }
  215. public static function respectsQuota(Profile $scoped, $fileSize)
  216. {
  217. if ($fileSize > common_config('attachments', 'file_quota')) {
  218. // TRANS: Message used to be inserted as %2$s in the text "No file may
  219. // TRANS: be larger than %1$d byte and the file you sent was %2$s.".
  220. // TRANS: %1$d is the number of bytes of an uploaded file.
  221. $fileSizeText = sprintf(_m('%1$d byte', '%1$d bytes', $fileSize), $fileSize);
  222. $fileQuota = common_config('attachments', 'file_quota');
  223. // TRANS: Message given if an upload is larger than the configured maximum.
  224. // TRANS: %1$d (used for plural) is the byte limit for uploads,
  225. // TRANS: %2$s is the proper form of "n bytes". This is the only ways to have
  226. // TRANS: gettext support multiple plurals in the same message, unfortunately...
  227. throw new ClientException(
  228. sprintf(
  229. _m(
  230. 'No file may be larger than %1$d byte and the file you sent was %2$s. Try to upload a smaller version.',
  231. 'No file may be larger than %1$d bytes and the file you sent was %2$s. Try to upload a smaller version.',
  232. $fileQuota
  233. ),
  234. $fileQuota,
  235. $fileSizeText
  236. )
  237. );
  238. }
  239. $file = new File;
  240. $query = "select sum(size) as total from file join file_to_post on file_to_post.file_id = file.id join notice on file_to_post.post_id = notice.id where profile_id = {$scoped->id} and file.url like '%/notice/%/file'";
  241. $file->query($query);
  242. $file->fetch();
  243. $total = $file->total + $fileSize;
  244. if ($total > common_config('attachments', 'user_quota')) {
  245. // TRANS: Message given if an upload would exceed user quota.
  246. // TRANS: %d (number) is the user quota in bytes and is used for plural.
  247. throw new ClientException(
  248. sprintf(
  249. _m(
  250. 'A file this large would exceed your user quota of %d byte.',
  251. 'A file this large would exceed your user quota of %d bytes.',
  252. common_config('attachments', 'user_quota')
  253. ),
  254. common_config('attachments', 'user_quota')
  255. )
  256. );
  257. }
  258. $query .= ' AND EXTRACT(month FROM file.modified) = EXTRACT(month FROM now()) and EXTRACT(year FROM file.modified) = EXTRACT(year FROM now())';
  259. $file->query($query);
  260. $file->fetch();
  261. $total = $file->total + $fileSize;
  262. if ($total > common_config('attachments', 'monthly_quota')) {
  263. // TRANS: Message given id an upload would exceed a user's monthly quota.
  264. // TRANS: $d (number) is the monthly user quota in bytes and is used for plural.
  265. throw new ClientException(
  266. sprintf(
  267. _m(
  268. 'A file this large would exceed your monthly quota of %d byte.',
  269. 'A file this large would exceed your monthly quota of %d bytes.',
  270. common_config('attachments', 'monthly_quota')
  271. ),
  272. common_config('attachments', 'monthly_quota')
  273. )
  274. );
  275. }
  276. return true;
  277. }
  278. public function getFilename()
  279. {
  280. return self::tryFilename($this->filename);
  281. }
  282. public function getSize()
  283. {
  284. return intval($this->size);
  285. }
  286. // where should the file go?
  287. public static function filename(Profile $profile, $origname, $mimetype)
  288. {
  289. $ext = self::guessMimeExtension($mimetype, $origname);
  290. // Normalize and make the original filename more URL friendly.
  291. $origname = basename($origname, ".$ext");
  292. if (class_exists('Normalizer')) {
  293. // http://php.net/manual/en/class.normalizer.php
  294. // http://www.unicode.org/reports/tr15/
  295. $origname = Normalizer::normalize($origname, Normalizer::FORM_KC);
  296. }
  297. $origname = preg_replace('/[^A-Za-z0-9\.\_]/', '_', $origname);
  298. $nickname = $profile->getNickname();
  299. $datestamp = strftime('%Y%m%d', time());
  300. do {
  301. // generate new random strings until we don't run into a filename collision.
  302. $random = strtolower(common_confirmation_code(16));
  303. $filename = "$nickname-$datestamp-$origname-$random.$ext";
  304. } while (file_exists(self::path($filename)));
  305. return $filename;
  306. }
  307. /**
  308. * @param string $filename
  309. * @return string|bool Value from the 'extblacklist' array, in the config
  310. */
  311. public static function getSafeExtension(string $filename) {
  312. if (preg_match('/^.+?\.([A-Za-z0-9]+)$/', $filename, $matches)) {
  313. // we matched on a file extension, so let's see if it means something.
  314. $ext = mb_strtolower($matches[1]);
  315. $blacklist = common_config('attachments', 'extblacklist');
  316. // If we got an extension from $filename we want to check if it's in a blacklist
  317. // so we avoid people uploading restricted files
  318. if (array_key_exists($ext, $blacklist)) {
  319. if (!is_string($blacklist[$ext])) {
  320. return false;
  321. }
  322. // return a safe replacement extension ('php' => 'phps' for example)
  323. return $blacklist[$ext];
  324. }
  325. // the attachment extension based on its filename was not blacklisted so it's ok to use it
  326. return $ext;
  327. } else {
  328. return false;
  329. }
  330. }
  331. /**
  332. * @param $mimetype string The mimetype we've discovered for this file.
  333. * @param $filename string An optional filename which we can use on failure.
  334. * @return mixed|string
  335. * @throws ClientException
  336. */
  337. public static function guessMimeExtension($mimetype, $filename=null)
  338. {
  339. try {
  340. // first see if we know the extension for our mimetype
  341. $ext = common_supported_mime_to_ext($mimetype);
  342. // we do, so use it!
  343. return $ext;
  344. } catch (UnknownMimeExtensionException $e) {
  345. // We don't know the extension for this mimetype, but let's guess.
  346. // If we can't recognize the extension from the MIME, we try
  347. // to guess based on filename, if one was supplied.
  348. if (!is_null($filename)) {
  349. $ext = getSafeExtension($filename);
  350. if ($ext === false) {
  351. // we don't have a safe replacement extension
  352. throw new ClientException(_('Blacklisted file extension.'));
  353. } else {
  354. return $ext;
  355. }
  356. }
  357. } catch (Exception $e) {
  358. common_log(LOG_INFO, 'Problem when figuring out extension for mimetype: '._ve($e));
  359. }
  360. // If nothing else has given us a result, try to extract it from
  361. // the mimetype value (this turns .jpg to .jpeg for example...)
  362. $matches = array();
  363. // Will get jpeg from image/jpeg as well as json from application/jrd+json
  364. if (!preg_match('/[\/+-\.]([a-z0-9]+)/', mb_strtolower($mimetype), $matches)) {
  365. throw new Exception("Malformed mimetype: {$mimetype}");
  366. }
  367. return mb_strtolower($matches[1]);
  368. }
  369. /**
  370. * Validation for as-saved base filenames
  371. * @param $filename
  372. * @return false|int
  373. */
  374. public static function validFilename($filename)
  375. {
  376. return preg_match('/^[A-Za-z0-9._-]+$/', $filename);
  377. }
  378. public static function tryFilename($filename)
  379. {
  380. if (!self::validFilename($filename)) {
  381. throw new InvalidFilenameException($filename);
  382. }
  383. // if successful, return the filename for easy if-statementing
  384. return $filename;
  385. }
  386. /**
  387. * @param $filename
  388. * @return string
  389. * @throws InvalidFilenameException
  390. */
  391. public static function path($filename)
  392. {
  393. self::tryFilename($filename);
  394. $dir = common_config('attachments', 'dir');
  395. if (!in_array($dir[mb_strlen($dir)-1], ['/', '\\'])) {
  396. $dir .= DIRECTORY_SEPARATOR;
  397. }
  398. return $dir . $filename;
  399. }
  400. public static function url($filename)
  401. {
  402. self::tryFilename($filename);
  403. if (common_config('site', 'private')) {
  404. return common_local_url(
  405. 'getfile',
  406. array('filename' => $filename)
  407. );
  408. }
  409. if (GNUsocial::useHTTPS()) {
  410. $sslserver = common_config('attachments', 'sslserver');
  411. if (empty($sslserver)) {
  412. // XXX: this assumes that background dir == site dir + /file/
  413. // not true if there's another server
  414. if (is_string(common_config('site', 'sslserver')) &&
  415. mb_strlen(common_config('site', 'sslserver')) > 0) {
  416. $server = common_config('site', 'sslserver');
  417. } elseif (common_config('site', 'server')) {
  418. $server = common_config('site', 'server');
  419. }
  420. $path = common_config('site', 'path') . '/file/';
  421. } else {
  422. $server = $sslserver;
  423. $path = common_config('attachments', 'sslpath');
  424. if (empty($path)) {
  425. $path = common_config('attachments', 'path');
  426. }
  427. }
  428. $protocol = 'https';
  429. } else {
  430. $path = common_config('attachments', 'path');
  431. $server = common_config('attachments', 'server');
  432. if (empty($server)) {
  433. $server = common_config('site', 'server');
  434. }
  435. $ssl = common_config('attachments', 'ssl');
  436. $protocol = ($ssl) ? 'https' : 'http';
  437. }
  438. if ($path[strlen($path)-1] != '/') {
  439. $path .= '/';
  440. }
  441. if ($path[0] != '/') {
  442. $path = '/'.$path;
  443. }
  444. return $protocol.'://'.$server.$path.$filename;
  445. }
  446. public static $_enclosures = array();
  447. public function getEnclosure()
  448. {
  449. if (isset(self::$_enclosures[$this->getID()])) {
  450. return self::$_enclosures[$this->getID()];
  451. }
  452. $enclosure = (object) array();
  453. foreach (array('title', 'url', 'date', 'modified', 'size', 'mimetype', 'width', 'height') as $key) {
  454. if ($this->$key !== '') {
  455. $enclosure->$key = $this->$key;
  456. }
  457. }
  458. $needMoreMetadataMimetypes = array(null, 'application/xhtml+xml', 'text/html');
  459. if (!isset($this->filename) && in_array(common_bare_mime($enclosure->mimetype), $needMoreMetadataMimetypes)) {
  460. // This fetches enclosure metadata for non-local links with unset/HTML mimetypes,
  461. // which may be enriched through oEmbed or similar (implemented as plugins)
  462. Event::handle('FileEnclosureMetadata', array($this, &$enclosure));
  463. }
  464. if (empty($enclosure->mimetype)) {
  465. // This means we either don't know what it is, so it can't
  466. // be shown as an enclosure, or it is an HTML link which
  467. // does not link to a resource with further metadata.
  468. throw new ServerException('Unknown enclosure mimetype, not enough metadata');
  469. }
  470. self::$_enclosures[$this->getID()] = $enclosure;
  471. return $enclosure;
  472. }
  473. public function hasThumbnail()
  474. {
  475. try {
  476. $this->getThumbnail();
  477. } catch (Exception $e) {
  478. return false;
  479. }
  480. return true;
  481. }
  482. /**
  483. * Get the attachment's thumbnail record, if any.
  484. * Make sure you supply proper 'int' typed variables (or null).
  485. *
  486. * @param $width int Max width of thumbnail in pixels. (if null, use common_config values)
  487. * @param $height int Max height of thumbnail in pixels. (if null, square-crop to $width)
  488. * @param $crop bool Crop to the max-values' aspect ratio
  489. * @param $force_still bool Don't allow fallback to showing original (such as animated GIF)
  490. * @param $upscale mixed Whether or not to scale smaller images up to larger thumbnail sizes. (null = site default)
  491. *
  492. * @return File_thumbnail
  493. *
  494. * @throws UseFileAsThumbnailException if the file is considered an image itself and should be itself as thumbnail
  495. * @throws UnsupportedMediaException if, despite trying, we can't understand how to make a thumbnail for this format
  496. * @throws ServerException on various other errors
  497. */
  498. public function getThumbnail($width=null, $height=null, $crop=false, $force_still=true, $upscale=null)
  499. {
  500. // Get some more information about this file through our ImageFile class
  501. $image = ImageFile::fromFileObject($this);
  502. if ($image->animated && !common_config('thumbnail', 'animated')) {
  503. // null means "always use file as thumbnail"
  504. // false means you get choice between frozen frame or original when calling getThumbnail
  505. if (is_null(common_config('thumbnail', 'animated')) || !$force_still) {
  506. try {
  507. // remote files with animated GIFs as thumbnails will match this
  508. return File_thumbnail::byFile($this);
  509. } catch (NoResultException $e) {
  510. // and if it's not a remote file, it'll be safe to use the locally stored File
  511. throw new UseFileAsThumbnailException($this);
  512. }
  513. }
  514. }
  515. return $image->getFileThumbnail(
  516. $width,
  517. $height,
  518. $crop,
  519. !is_null($upscale) ? $upscale : common_config('thumbnail', 'upscale')
  520. );
  521. }
  522. public function getPath()
  523. {
  524. $filepath = self::path($this->filename);
  525. if (!file_exists($filepath)) {
  526. throw new FileNotFoundException($filepath);
  527. }
  528. return $filepath;
  529. }
  530. public function getAttachmentUrl()
  531. {
  532. return common_local_url('attachment', array('attachment'=>$this->getID()));
  533. }
  534. public function getAttachmentDownloadUrl()
  535. {
  536. return common_local_url('attachment_download', array('attachment'=>$this->getID()));
  537. }
  538. public function getAttachmentViewUrl()
  539. {
  540. return common_local_url('attachment_view', array('attachment'=>$this->getID()));
  541. }
  542. /**
  543. * @param mixed $use_local true means require local, null means prefer local, false means use whatever is stored
  544. * @return string
  545. * @throws FileNotStoredLocallyException
  546. */
  547. public function getUrl($use_local=null)
  548. {
  549. if ($use_local !== false) {
  550. if (is_string($this->filename) || !empty($this->filename)) {
  551. // A locally stored file, so let's generate a URL for our instance.
  552. return $this->getAttachmentViewUrl();
  553. }
  554. if ($use_local) {
  555. // if the file wasn't stored locally (has filename) and we require a local URL
  556. throw new FileNotStoredLocallyException($this);
  557. }
  558. }
  559. // No local filename available, return the URL we have stored
  560. return $this->url;
  561. }
  562. public static function getByUrl($url)
  563. {
  564. $file = new File();
  565. $file->urlhash = self::hashurl($url);
  566. if (!$file->find(true)) {
  567. throw new NoResultException($file);
  568. }
  569. return $file;
  570. }
  571. /**
  572. * @param string $hashstr String of (preferrably lower case) hexadecimal characters, same as result of 'hash_file(...)'
  573. * @return File
  574. * @throws NoResultException
  575. */
  576. public static function getByHash($hashstr)
  577. {
  578. $file = new File();
  579. $file->filehash = strtolower($hashstr);
  580. if (!$file->find(true)) {
  581. throw new NoResultException($file);
  582. }
  583. return $file;
  584. }
  585. public function updateUrl($url)
  586. {
  587. $file = File::getKV('urlhash', self::hashurl($url));
  588. if ($file instanceof File) {
  589. throw new ServerException('URL already exists in DB');
  590. }
  591. $sql = 'UPDATE %1$s SET urlhash=%2$s, url=%3$s WHERE urlhash=%4$s;';
  592. $result = $this->query(sprintf(
  593. $sql,
  594. $this->tableName(),
  595. $this->_quote((string)self::hashurl($url)),
  596. $this->_quote((string)$url),
  597. $this->_quote((string)$this->urlhash)
  598. ));
  599. if ($result === false) {
  600. common_log_db_error($this, 'UPDATE', __FILE__);
  601. throw new ServerException("Could not UPDATE {$this->tableName()}.url");
  602. }
  603. return $result;
  604. }
  605. /**
  606. * Blow the cache of notices that link to this URL
  607. *
  608. * @param boolean $last Whether to blow the "last" cache too
  609. *
  610. * @return void
  611. */
  612. public function blowCache($last=false)
  613. {
  614. self::blow('file:notice-ids:%s', $this->id);
  615. if ($last) {
  616. self::blow('file:notice-ids:%s;last', $this->id);
  617. }
  618. self::blow('file:notice-count:%d', $this->id);
  619. }
  620. /**
  621. * Stream of notices linking to this URL
  622. *
  623. * @param integer $offset Offset to show; default is 0
  624. * @param integer $limit Limit of notices to show
  625. * @param integer $since_id Since this notice
  626. * @param integer $max_id Before this notice
  627. *
  628. * @return array ids of notices that link to this file
  629. */
  630. public function stream($offset=0, $limit=NOTICES_PER_PAGE, $since_id=0, $max_id=0)
  631. {
  632. // FIXME: Try to get the Profile::current() here in some other way to avoid mixing
  633. // the current session user with possibly background/queue processing.
  634. $stream = new FileNoticeStream($this, Profile::current());
  635. return $stream->getNotices($offset, $limit, $since_id, $max_id);
  636. }
  637. public function noticeCount()
  638. {
  639. $cacheKey = sprintf('file:notice-count:%d', $this->id);
  640. $count = self::cacheGet($cacheKey);
  641. if ($count === false) {
  642. $f2p = new File_to_post();
  643. $f2p->file_id = $this->id;
  644. $count = $f2p->count();
  645. self::cacheSet($cacheKey, $count);
  646. }
  647. return $count;
  648. }
  649. public function isLocal()
  650. {
  651. return !empty($this->filename);
  652. }
  653. public function delete($useWhere=false)
  654. {
  655. // Delete the file, if it exists locally
  656. if (!empty($this->filename) && file_exists(self::path($this->filename))) {
  657. $deleted = @unlink(self::path($this->filename));
  658. if (!$deleted) {
  659. common_log(LOG_ERR, sprintf('Could not unlink existing file: "%s"', self::path($this->filename)));
  660. }
  661. }
  662. // Clear out related things in the database and filesystem, such as thumbnails
  663. if (Event::handle('FileDeleteRelated', array($this))) {
  664. $thumbs = new File_thumbnail();
  665. $thumbs->file_id = $this->id;
  666. if ($thumbs->find()) {
  667. while ($thumbs->fetch()) {
  668. $thumbs->delete();
  669. }
  670. }
  671. $f2p = new File_to_post();
  672. $f2p->file_id = $this->id;
  673. if ($f2p->find()) {
  674. while ($f2p->fetch()) {
  675. $f2p->delete();
  676. }
  677. }
  678. }
  679. // And finally remove the entry from the database
  680. return parent::delete($useWhere);
  681. }
  682. public function getTitle()
  683. {
  684. $title = $this->title ?: MediaFile::getDisplayName($this);
  685. return $title ?: null;
  686. }
  687. public function setTitle($title)
  688. {
  689. $orig = clone($this);
  690. $this->title = mb_strlen($title) > 0 ? $title : null;
  691. return $this->update($orig);
  692. }
  693. public static function hashurl($url)
  694. {
  695. if (empty($url)) {
  696. throw new Exception('No URL provided to hash algorithm.');
  697. }
  698. return hash(self::URLHASH_ALG, $url);
  699. }
  700. public static function beforeSchemaUpdate()
  701. {
  702. $table = strtolower(get_called_class());
  703. $schema = Schema::get();
  704. $schemadef = $schema->getTableDef($table);
  705. // 2015-02-19 We have to upgrade our table definitions to have the urlhash field populated
  706. if (isset($schemadef['fields']['urlhash']) && isset($schemadef['unique keys']['file_urlhash_key'])) {
  707. // We already have the urlhash field, so no need to migrate it.
  708. return;
  709. }
  710. echo "\nFound old $table table, upgrading it to contain 'urlhash' field...";
  711. $file = new File();
  712. $file->query(sprintf('SELECT id, LEFT(url, 191) AS shortenedurl, COUNT(*) AS c FROM %1$s WHERE LENGTH(url)>191 GROUP BY shortenedurl HAVING c > 1', $schema->quoteIdentifier($table)));
  713. print "\nFound {$file->N} URLs with too long entries in file table\n";
  714. while ($file->fetch()) {
  715. // We've got a URL that is too long for our future file table
  716. // so we'll cut it. We could save the original URL, but there is
  717. // no guarantee it is complete anyway since the previous max was 255 chars.
  718. $dupfile = new File();
  719. // First we find file entries that would be duplicates of this when shortened
  720. // ... and we'll just throw the dupes out the window for now! It's already so borken.
  721. $dupfile->query(sprintf('SELECT * FROM file WHERE LEFT(url, 191) = %1$s', $dupfile->_quote($file->shortenedurl)));
  722. // Leave one of the URLs in the database by using ->find(true) (fetches first entry)
  723. if ($dupfile->find(true)) {
  724. print "\nShortening url entry for $table id: {$file->id} [";
  725. $orig = clone($dupfile);
  726. $origurl = $dupfile->url; // save for logging purposes
  727. $dupfile->url = $file->shortenedurl; // make sure it's only 191 chars from now on
  728. $dupfile->update($orig);
  729. print "\nDeleting duplicate entries of too long URL on $table id: {$file->id} [";
  730. // only start deleting with this fetch.
  731. while ($dupfile->fetch()) {
  732. common_log(LOG_INFO, sprintf('Deleting duplicate File entry of %1$d: %2$d (original URL: %3$s collides with these first 191 characters: %4$s', $dupfile->id, $file->id, $origurl, $file->shortenedurl));
  733. print ".";
  734. $dupfile->delete();
  735. }
  736. print "]\n";
  737. } else {
  738. print "\nWarning! URL suddenly disappeared from database: {$file->url}\n";
  739. }
  740. }
  741. echo "...and now all the non-duplicates which are longer than 191 characters...\n";
  742. $file->query('UPDATE file SET url=LEFT(url, 191) WHERE LENGTH(url)>191');
  743. echo "\n...now running hacky pre-schemaupdate change for $table:";
  744. // We have to create a urlhash that is _not_ the primary key,
  745. // transfer data and THEN run checkSchema
  746. $schemadef['fields']['urlhash'] = array(
  747. 'type' => 'varchar',
  748. 'length' => 64,
  749. 'not null' => false, // this is because when adding column, all entries will _be_ NULL!
  750. 'description' => 'sha256 of destination URL (url field)',
  751. );
  752. $schemadef['fields']['url'] = array(
  753. 'type' => 'text',
  754. 'description' => 'destination URL after following possible redirections',
  755. );
  756. unset($schemadef['unique keys']);
  757. $schema->ensureTable($table, $schemadef);
  758. echo "DONE.\n";
  759. $classname = ucfirst($table);
  760. $tablefix = new $classname;
  761. // urlhash is hash('sha256', $url) in the File table
  762. echo "Updating urlhash fields in $table table...";
  763. // Maybe very MySQL specific :(
  764. $tablefix->query(sprintf(
  765. 'UPDATE %1$s SET %2$s=%3$s;',
  766. $schema->quoteIdentifier($table),
  767. 'urlhash',
  768. // The line below is "result of sha256 on column `url`"
  769. 'SHA2(url, 256)'
  770. ));
  771. echo "DONE.\n";
  772. echo "Resuming core schema upgrade...";
  773. }
  774. }