bit-form / includes / Core / Util / FileHandler.php

FileHandler.php in Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder 2.16.2, at includes/Core/Util/FileHandler.php

339 lines 12.5 KB

Raw Download Zip

1	<?php
2
3	namespace BitCode\BitForm\Core\Util;
4
5	use BitCode\BitForm\Core\Form\FormManager;
6	use BitCode\BitForm\enshrined\svgSanitize\Sanitizer;
7
8	final class FileHandler
9	{
10	public function rmrf($dir)
11	{
12	if (is_dir($dir)) {
13	$objects = scandir($dir);
14	foreach ($objects as $object) {
15	if ('.' !== $object && '..' !== $object) {
16	if (is_dir($dir . DIRECTORY_SEPARATOR . $object) && !is_link($dir . DIRECTORY_SEPARATOR . $object)) {
17	$this->rmrf($dir . DIRECTORY_SEPARATOR . $object);
18	} else {
19	wp_delete_file($dir . DIRECTORY_SEPARATOR . $object);
20	}
21	}
22	}
23	rmdir($dir);
24	} else {
25	wp_delete_file($dir);
26	}
27	}
28
29	public function cpyr($source, $destination)
30	{
31	if (is_dir($source)) {
32	mkdir($destination);
33	// chmod($destination, 0744);
34	$objects = scandir($source);
35	foreach ($objects as $object) {
36	if ('.' !== $object && '..' !== $object) {
37	if (is_dir($source . DIRECTORY_SEPARATOR . $object) && !is_link($source . DIRECTORY_SEPARATOR . $object)) {
38	cpyr($source . DIRECTORY_SEPARATOR . $object, $destination . DIRECTORY_SEPARATOR . $object);
39	} elseif (is_file($source . DIRECTORY_SEPARATOR . $object)) {
40	copy($source . DIRECTORY_SEPARATOR . $object, $destination . DIRECTORY_SEPARATOR . $object);
41	// chmod($destination. DIRECTORY_SEPARATOR .$object, 0644);
42	} else {
43	symlink($source . DIRECTORY_SEPARATOR . $object, $destination . DIRECTORY_SEPARATOR . $object);
44	}
45	}
46	}
47	} else {
48	copy($source, $destination);
49	}
50	}
51
52	public function moveUploadedFiles($file_details, $form_id, $entry_id)
53	{
54	$file_upoalded = [];
55	$_upload_dir = BITFORMS_UPLOAD_DIR . DIRECTORY_SEPARATOR . $form_id . DIRECTORY_SEPARATOR . $entry_id;
56	wp_mkdir_p($_upload_dir);
57	if (is_array($file_details['name'])) {
58	foreach ($file_details['name'] as $key => $value) {
59	//check accepted filetype in_array($file_details['name'][$key], $supported_files) else \
60	if (!empty($value)) {
61	$fileNameCount = 1;
62	// $file_upoalded[$key] = time()."_$value";
63	$file_upoalded[$key] = sanitize_file_name($value);
64	while (file_exists($_upload_dir . DIRECTORY_SEPARATOR . $file_upoalded[$key])) {
65	$fileNameWithSeparator = BITFORMS_BF_SEPARATOR . $fileNameCount;
66	$file_upoalded[$key] = sanitize_file_name(preg_replace('/(.[a-z A-Z 0-9]+)$/', "{$fileNameWithSeparator}$1", $value));
67	$fileNameCount = $fileNameCount + 1;
68	if (11 === $fileNameCount) {
69	break;
70	}
71	}
72	$move_status = \move_uploaded_file($file_details['tmp_name'][$key], $_upload_dir . DIRECTORY_SEPARATOR . $file_upoalded[$key]);
73	if (!$move_status) {
74	unset($file_upoalded[$key]);
75	}
76	}
77	}
78	} else {
79	if (!empty($file_details['name'])) {
80	$fileNameCount = 1;
81	$file_upoalded[0] = sanitize_file_name($file_details['name']);
82	while (file_exists($_upload_dir . DIRECTORY_SEPARATOR . $file_upoalded[0])) {
83	$fileNameWithSeparator = BITFORMS_BF_SEPARATOR . $fileNameCount;
84	$file_upoalded[0] = sanitize_file_name(preg_replace('/(.[a-z A-Z 0-9]+)$/', "{$fileNameWithSeparator}$1", $file_details['name']));
85	$fileNameCount = $fileNameCount + 1;
86	if (11 === $fileNameCount) {
87	break;
88	}
89	}
90	$move_status = \move_uploaded_file($file_details['tmp_name'], $_upload_dir . DIRECTORY_SEPARATOR . $file_upoalded[0]);
91	if (!$move_status) {
92	unset($file_upoalded[0]);
93	}
94	}
95	}
96	return $file_upoalded;
97	}
98
99	public function deleteFiles($form_id, $entry_id, $files)
100	{
101	$_upload_dir = BITFORMS_UPLOAD_DIR . DIRECTORY_SEPARATOR . $form_id . DIRECTORY_SEPARATOR . $entry_id;
102	foreach ($files as $name) {
103	wp_delete_file($_upload_dir . DIRECTORY_SEPARATOR . $name);
104	}
105	}
106
107	public static function getFileUploadError($code)
108	{
109	$errors = [
110	0 => __('Unknown upload error', 'bit-form'),
111	1 => __('The uploaded file exceeds the upload_max_filesize directive in php.ini.', 'bit-form'),
112	2 => __('The uploaded file exceeds the MAX_FILE_SIZE directive that was specified in the HTML form.', 'bit-form'),
113	3 => __('The uploaded file was only partially uploaded.', 'bit-form'),
114	4 => __('No file was uploaded.', 'bit-form'),
115	6 => __('Missing a temporary folder.', 'bit-form'),
116	7 => __('Failed to write file to disk.', 'bit-form'),
117	8 => __('A PHP extension stopped the file upload.', 'bit-form'),
118	];
119	return $errors[$code];
120	}
121
122	public static function fileCopy($tmpdir, $destinationDir, $file)
123	{
124	$tmpFile = $tmpdir . DIRECTORY_SEPARATOR . $file;
125	$newFile = $destinationDir . DIRECTORY_SEPARATOR . $file;
126	if (file_exists($tmpFile)) {
127	copy($tmpFile, $newFile);
128	}
129	}
130
131	public static function tempDirToUploadDir($submitted_data, $fields, $formId, $entryID)
132	{
133	$upload_dir = wp_upload_dir();
134	$tempDir = $upload_dir['basedir'] . '/bitforms/temp';
135	$destinationDir = BITFORMS_UPLOAD_DIR . DIRECTORY_SEPARATOR . $formId . DIRECTORY_SEPARATOR . $entryID . DIRECTORY_SEPARATOR;
136	if (!is_dir($destinationDir)) {
137	mkdir($destinationDir);
138	}
139
140	foreach ($submitted_data as $key => $data) {
141	if (isset($fields[$key]) && 'advanced-file-up' === $fields[$key]['type']) {
142	$files = $data;
143	$fldData = $submitted_data[$key];
144	$files = explode(',', $fldData);
145	if (is_array($files) && count($files) > 0) {
146	foreach ($files as $file) {
147	self::fileCopy($tempDir, $destinationDir, trim($file));
148	}
149	} else {
150	self::fileCopy($tempDir, $destinationDir, trim($files));
151	}
152	if (!empty($files)) {
153	$submitted_data[$key] = $files;
154	}
155	}
156	}
157	array_map('unlink', array_filter(
158	(array) array_merge(glob("$tempDir/*"))
159	));
160
161	return $submitted_data;
162	}
163
164	private function getByteSizeByUnit($sizeString)
165	{
166	// split 2MB into 2 and MB
167	$size = preg_replace('/[^0-9\.]/', '', $sizeString);
168	$unit = preg_replace('/[^a-zA-Z]/', '', $sizeString);
169	$unit = strtolower($unit);
170	if ('kb' === $unit) {
171	return $size * 1024;
172	} elseif ('mb' === $unit) {
173	return $size * 1024 * 1024;
174	} elseif ('gb' === $unit) {
175	return $size * 1024 * 1024 * 1024;
176	} else {
177	return $size;
178	}
179	}
180
181	public function validation($field_key, $file_details, $form_id)
182	{
183	if (!function_exists('wp_check_filetype_and_ext')) {
184	require_once ABSPATH . 'wp-admin/includes/file.php';
185	}
186
187	$formManager = new FormManager($form_id);
188	$form_contents = $formManager->getFormContent();
189	$field_content_details = $form_contents->fields;
190	$fieldDetail = $field_content_details->{$field_key};
191	$fieldType = $fieldDetail->typ;
192	$maxSizeDetails = [];
193	$allowFileTypes = [];
194	$maxSize = null;
195	if ('file-up' === $fieldType) {
196	$allowFileTypes = !empty($fieldDetail->config->allowedFileType) ? $fieldDetail->config->allowedFileType : [];
197	if (!empty($fieldDetail->config->allowMaxSize)) {
198	if (!empty($fieldDetail->config->maxSize)) {
199	$maxSizeDetails['maxSize'] = $fieldDetail->config->maxSize . $fieldDetail->config->sizeUnit;
200	}
201	if (!empty($fieldDetail->config->isItTotalMax)) {
202	$maxSizeDetails['maxTotalFileSize'] = $fieldDetail->config->maxSize . $fieldDetail->config->sizeUnit;
203	}
204	}
205	if (!empty($allowFileTypes)) {
206	$allowFileTypes = explode(',', $allowFileTypes);
207	}
208	} elseif ('advanced-file-up' === $fieldType) {
209	$allowFileTypes = !empty($fieldDetail->config->allowFileTypeValidation) ? $fieldDetail->config->acceptedFileTypes : [];
210	if (!empty($fieldDetail->config->allowFileSizeValidation)) {
211	if (!empty($fieldDetail->config->maxFileSize)) {
212	$maxSizeDetails['maxSize'] = $fieldDetail->config->maxFileSize;
213	}
214	if (!empty($fieldDetail->config->maxTotalFileSize)) {
215	$maxSizeDetails['maxTotalFileSize'] = $fieldDetail->config->maxTotalFileSize;
216	}
217	}
218	}
219	if (!empty($maxSizeDetails['maxSize'])) {
220	$maxSize = $this->getByteSizeByUnit($maxSizeDetails['maxSize']);
221	}
222	$maxTotalFileSize = null;
223	if (!empty($maxSizeDetails['maxTotalFileSize'])) {
224	$maxTotalFileSize = $this->getByteSizeByUnit($maxSizeDetails['maxTotalFileSize']);
225	}
226
227	if ($formManager->isRepeatedField($field_key)) {
228	foreach ($file_details['name'] as $rowIndex => $file) {
229	if (!empty($file)) {
230	$fileDetails = [
231	'name' => $file,
232	'type' => $file_details['type'][$rowIndex],
233	'tmp_name' => $file_details['tmp_name'][$rowIndex],
234	'error' => $file_details['error'][$rowIndex],
235	'size' => $file_details['size'][$rowIndex],
236	];
237	$validateState = $this->validateFileInfo($fieldType, $fileDetails, $allowFileTypes, $maxSize, $maxTotalFileSize);
238	if (!empty($validateState) && !empty($validateState['message'])) {
239	return $validateState;
240	}
241	}
242	}
243	} else {
244	return $this->validateFileInfo($fieldType, $file_details, $allowFileTypes, $maxSize, $maxTotalFileSize);
245	}
246	return [];
247	}
248
249	private function validateFileInfo($fieldType, $file_details, $allowFileTypes, $maxSize, $maxTotalFileSize)
250	{
251	$errorMessage = [
252	'message' => '',
253	'error_type'=> '',
254	];
255	if (is_array($file_details['name'])) {
256	$totalSize = 0;
257	foreach ($file_details['name'] as $key => $file) {
258	if (!empty($file)) {
259	$fileInfo = [
260	'name' => $file,
261	'type' => $file_details['type'][$key],
262	'tmp_name' => $file_details['tmp_name'][$key],
263	'error' => $file_details['error'][$key],
264	'size' => $file_details['size'][$key],
265	];
266	$totalSize += $fileInfo['size'];
267	$validateState = $this->validateSingleFile($fieldType, $fileInfo, $allowFileTypes, $maxSize);
268	if (!empty($validateState)) {
269	return $validateState;
270	}
271	}
272	}
273	if (isset($maxTotalFileSize) && !is_null($maxTotalFileSize) && $totalSize > $maxTotalFileSize) {
274	$errorMessage['message'] = __('Total File size is too large', 'bit-form');
275	$errorMessage['error_type'] = 'file_size_error';
276	return $errorMessage;
277	}
278	} else {
279	$validateState = $this->validateSingleFile($fieldType, $file_details, $allowFileTypes, $maxSize);
280	if (!empty($validateState)) {
281	return $validateState;
282	}
283	}
284
285	return $errorMessage;
286	}
287
288	private function validateSingleFile($fieldType, &$file, $allowTypes, $maxSize = null)
289	{
290	$fileName = sanitize_file_name($file['name']);
291	if (!empty($fileName)) {
292	$fileSize = $file['size'];
293	if (!empty($maxSize) && $fileSize > $maxSize) {
294	return [
295	'message' => __('File size is too large', 'bit-form'),
296	'error_type'=> 'file_size_error',
297	];
298	}
299
300	$fileExtension = pathinfo($fileName, PATHINFO_EXTENSION);
301	$fileExtAllowedByWp = wp_check_filetype_and_ext($file['tmp_name'], $fileName);
302	$isAllowedFileType = in_array('.' . $fileExtension, $allowTypes);
303	if ('advanced-file-up' === $fieldType && !empty($allowTypes)) {
304	if (function_exists('mime_content_type')) {
305	$fileMimeType = mime_content_type($file['tmp_name']);
306	} else {
307	$fileMimeType = $fileExtAllowedByWp['type'];
308	}
309	$isAllowedFileType = in_array($fileMimeType, $allowTypes);
310	}
311	if ((!empty($allowTypes) && !$isAllowedFileType) \|\| (empty($allowTypes) && empty($fileExtAllowedByWp['ext']))) {
312	return [
313	'message' => __(($fileExtension ? ".{$fileExtension}" : 'empty') . ' file extension is not allowed', 'bit-form'),
314	'error_type'=> 'file_type_error',
315	];
316	}
317	if ('svg' === $fileExtension) {
318	$svg_sanitizer = new Sanitizer();
319	$dirty_svg = file_get_contents($file['tmp_name']);
320	$clean_svg = $svg_sanitizer->sanitize($dirty_svg);
321	if (false === $clean_svg) {
322	return [
323	'message' => __('SVG file is not valid', 'bit-form'),
324	'error_type'=> 'file_type_error',
325	];
326	}
327	file_put_contents($file['tmp_name'], $clean_svg);
328	}
329	}
330	}
331
332	public static function deleteIsFileExists($path)
333	{
334	if (file_exists($path)) {
335	wp_delete_file($path);
336	}
337	}
338	}
339