class-svg-upload.php — Admin and Site Enhancements (ASE) 7.0.2

admin-site-enhancements / classes / class-svg-upload.php

admin-site-enhancements / classes Last commit date

class-svg-upload.php

215 lines

1	<?php
2
3	namespace ASENHA\Classes;
4
5	/**
6	* Class for SVG Upload module
7	*
8	* @since 6.9.5
9	*/
10	class SVG_Upload {
11
12	/**
13	* Add SVG mime type for media library uploads
14	*
15	* @link https://developer.wordpress.org/reference/hooks/upload_mimes/
16	* @since 2.6.0
17	*/
18	public function add_svg_mime( $mimes ) {
19
20	global $roles_svg_upload_enabled;
21
22	$current_user = wp_get_current_user();
23	$current_user_roles = (array) $current_user->roles; // single dimensional array of role slugs
24
25	if ( count( $roles_svg_upload_enabled ) > 0 ) {
26
27	// Add mime type for user roles set to enable SVG upload
28	foreach ( $current_user_roles as $role ) {
29	if ( in_array( $role, $roles_svg_upload_enabled ) ) {
30	$mimes['svg'] = 'image/svg+xml';
31	}
32	}
33
34	}
35
36	return $mimes;
37
38	}
39
40	/**
41	* Check and confirm if the real file type is indeed SVG
42	*
43	* @link https://developer.wordpress.org/reference/functions/wp_check_filetype_and_ext/
44	* @since 2.6.0
45	*/
46	public function confirm_file_type_is_svg( $filetypes_extensions, $file, $filename, $mimes ) {
47
48	global $roles_svg_upload_enabled;
49
50	$current_user = wp_get_current_user();
51	$current_user_roles = (array) $current_user->roles; // single dimensional array of role slugs
52
53	if ( count( $roles_svg_upload_enabled ) > 0 ) {
54
55	// Check file extension
56	if ( substr( $filename, -4 ) == '.svg' ) {
57
58	// Add mime type for user roles set to enable SVG upload
59	foreach ( $current_user_roles as $role ) {
60	if ( in_array( $role, $roles_svg_upload_enabled ) ) {
61	$filetypes_extensions['type'] = 'image/svg+xml';
62	$filetypes_extensions['ext'] = 'svg';
63	}
64	}
65
66	}
67
68	}
69
70	return $filetypes_extensions;
71
72	}
73
74	/**
75	* Sanitize the SVG file and maybe allow upload based on the result
76	*
77	* @since 2.6.0
78	*/
79	public function sanitize_and_maybe_allow_svg_upload( $file ) {
80
81	if ( ! isset( $file['tmp_name'] ) ) {
82	return $file;
83	}
84
85	$file_tmp_name = $file['tmp_name']; // full path
86	$file_name = isset( $file['name'] ) ? $file['name'] : '';
87	$file_type_ext = wp_check_filetype_and_ext( $file_tmp_name, $file_name );
88	$file_type = ! empty( $file_type_ext['type'] ) ? $file_type_ext['type'] : '';
89
90	if ( 'image/svg+xml' === $file_type ) {
91
92	// Load sanitizer library - https://github.com/darylldoyle/svg-sanitizer
93	require_once ASENHA_PATH . 'vendor/enshrined/svg-sanitize/src/data/AttributeInterface.php';
94	require_once ASENHA_PATH . 'vendor/enshrined/svg-sanitize/src/data/TagInterface.php';
95	require_once ASENHA_PATH . 'vendor/enshrined/svg-sanitize/src/data/AllowedAttributes.php';
96	require_once ASENHA_PATH . 'vendor/enshrined/svg-sanitize/src/data/AllowedTags.php';
97	require_once ASENHA_PATH . 'vendor/enshrined/svg-sanitize/src/data/XPath.php';
98	require_once ASENHA_PATH . 'vendor/enshrined/svg-sanitize/src/ElementReference/Resolver.php';
99	require_once ASENHA_PATH . 'vendor/enshrined/svg-sanitize/src/ElementReference/Subject.php';
100	require_once ASENHA_PATH . 'vendor/enshrined/svg-sanitize/src/ElementReference/Usage.php';
101	require_once ASENHA_PATH . 'vendor/enshrined/svg-sanitize/src/Exceptions/NestingException.php';
102	require_once ASENHA_PATH . 'vendor/enshrined/svg-sanitize/src/Helper.php';
103	require_once ASENHA_PATH . 'vendor/enshrined/svg-sanitize/src/Sanitizer.php';
104
105	// $sanitizer = new Sanitizer();
106	$sanitizer = new \enshrined\svgSanitize\Sanitizer();
107
108	$original_svg = file_get_contents( $file_tmp_name );
109	$sanitized_svg = $sanitizer->sanitize( $original_svg ); // boolean
110
111	if ( false === $sanitized_svg ) {
112
113	$file['error'] = 'This SVG file could not be sanitized, so, was not uploaded for security reasons.';
114
115	}
116
117	file_put_contents( $file_tmp_name, $sanitized_svg );
118
119	}
120
121	return $file;
122
123	}
124
125	/**
126	* Generate metadata for the svg attachment
127	*
128	* @link https://developer.wordpress.org/reference/functions/wp_generate_attachment_metadata/
129	* @since 2.6.0
130	*/
131	public function generate_svg_metadata( $metadata, $attachment_id, $context ) {
132
133	if ( get_post_mime_type( $attachment_id ) == 'image/svg+xml' ) {
134
135	// Get SVG dimensions
136	$svg_path = get_attached_file( $attachment_id );
137	$svg = simplexml_load_file( $svg_path );
138	$width = 0;
139	$height = 0;
140
141	if ( $svg ) {
142
143	$attributes = $svg->attributes();
144	if ( isset( $attributes->width, $attributes->height ) ) {
145	$width = intval( floatval( $attributes->width ) );
146	$height = intval( floatval( $attributes->height ) );
147	} elseif ( isset( $attributes->viewBox ) ) {
148	$sizes = explode( ' ', $attributes->viewBox );
149	if ( isset( $sizes[2], $sizes[3] ) ) {
150	$width = intval( floatval( $sizes[2] ) );
151	$height = intval( floatval( $sizes[3] ) );
152	}
153	}
154
155	}
156
157	$metadata['width'] = $width;
158	$metadata['height'] = $height;
159
160	// Get SVG filename
161	$svg_url = wp_get_original_image_url( $attachment_id );
162	$svg_url_path = str_replace( wp_upload_dir()['baseurl'] .'/' , '', $svg_url );
163	$metadata['file'] = $svg_url_path;
164
165	}
166
167	return $metadata;
168
169	}
170
171	/**
172	* Return svg file URL to show preview in media library
173	*
174	* @link https://developer.wordpress.org/reference/hooks/wp_ajax_action/
175	* @link https://developer.wordpress.org/reference/functions/wp_get_attachment_url/
176	* @since 2.6.0
177	*/
178	public function get_svg_attachment_url() {
179
180	$attachment_url = '';
181	$attachment_id = isset( $_REQUEST['attachmentID'] ) ? $_REQUEST['attachmentID'] : '';
182
183	// Check response mime type
184	if ( $attachment_id ) {
185
186	echo esc_url( wp_get_attachment_url( $attachment_id ) );
187
188	die();
189
190	}
191
192	}
193
194	/**
195	* Return svg file URL to show preview in media library
196	*
197	* @link https://developer.wordpress.org/reference/functions/wp_prepare_attachment_for_js/
198	* @since 2.6.0
199	*/
200	public function get_svg_url_in_media_library( $response ) {
201
202	// Check response mime type
203	if ( $response['mime'] === 'image/svg+xml' ) {
204
205	$response['image'] = array(
206	'src' => $response['url'],
207	);
208
209	}
210
211	return $response;
212
213	}
214
215	}