← All changes | app/Models/Attachment.php +85 -2 1.10.5 → 2.4.5 View file →

		@@ -40,8 +40,38 @@
40	40	$model->file_hash = md5($uid . wp_rand(0, 1000));
41	41	});
42	42	}
43	43
	44	+ /**
	45	+ * Delete the stored files for these attachments (local, or via the remote
	46	+ * driver hook). DB rows are left to the caller.
	47	+ *
	48	+ * @param \FluentSupport\Framework\Database\Orm\Collection|array $attachments
	49	+ * @param int|null $ticketId When provided, removes the ticket_{id} upload directory.
	50	+ */
	51	+ public static function purgeAttachments($attachments, $ticketId = null)
	52	+ {
	53	+ foreach ($attachments as $attachment) {
	54	+ if ($attachment->driver && $attachment->driver !== 'local') {
	55	+ do_action('fluent_support/delete_remote_attachment_' . $attachment->driver, $attachment);
	56	+ } elseif ($attachment->file_path && file_exists($attachment->file_path)) {
	57	+ wp_delete_file($attachment->file_path);
	58	+ }
	59	+ }
	60	+
	61	+ if ($ticketId) {
	62	+ $uploadDir = wp_upload_dir();
	63	+ $ticketDir = $uploadDir['basedir'] . '/' . FLUENT_SUPPORT_UPLOAD_DIR . '/ticket_' . $ticketId;
	64	+ if (is_dir($ticketDir)) {
	65	+ if (!class_exists('\WP_Filesystem_Direct')) {
	66	+ require_once ABSPATH . 'wp-admin/includes/class-wp-filesystem-base.php';
	67	+ require_once ABSPATH . 'wp-admin/includes/class-wp-filesystem-direct.php';
	68	+ }
	69	+ (new \WP_Filesystem_Direct(false))->rmdir($ticketDir, true);
	70	+ }
	71	+ }
	72	+ }
	73	+
44	74	public function setSettingsAttribute($settings)
45	75	{
46	76	$this->attributes['settings'] = \maybe_serialize($settings);
47	77	}
		@@ -51,15 +81,68 @@
51	81	return Helper::safeUnserialize($settings);
52	82	}
53	83
54	84	/**
55		- * Accessor to get dynamic full_name attribute
	85	+ * Signed download URL.
	86	+ *
56	87	* @return string
57	88	*/
58	89	public function getSecureUrlAttribute()
59	90	{
	91	+ return $this->signedUrl(self::signedUrlExpiry());
	92	+ }
	93	+
	94	+ /**
	95	+ * Download URL valid until $expires.
	96	+ *
	97	+ * @param int $expires Unix timestamp.
	98	+ * @return string
	99	+ */
	100	+ public function signedUrl($expires)
	101	+ {
60	102	return add_query_arg([
61	103	'fst_file' => $this->file_hash,
62		- 'secure_sign' => md5($this->id . date('YmdH'))
	104	+ 'expires' => (int) $expires,
	105	+ 'secure_sign' => self::signature($this->id, (int) $expires)
63	106	], site_url('/index.php'));
	107	+ }
	108	+
	109	+ /**
	110	+ * Expiry for a newly signed URL. Rounded to a TTL boundary so the URL stays
	111	+ * the same for a while (browser caching), and always at least one TTL ahead.
	112	+ * A URL signed just before a boundary used to die within seconds.
	113	+ *
	114	+ * @return int Unix timestamp.
	115	+ */
	116	+ public static function signedUrlExpiry()
	117	+ {
	118	+ $ttl = max(MINUTE_IN_SECONDS * 5, (int) apply_filters('fluent_support/attachment_signed_url_ttl', HOUR_IN_SECONDS));
	119	+
	120	+ return (intdiv(time(), $ttl) + 2) * $ttl;
	121	+ }
	122	+
	123	+ /**
	124	+ * Signature for an expiring URL. The 'v2|' prefix keeps it apart from legacy
	125	+ * signatures: those signed "id|YmdH", and without the prefix an old hourly
	126	+ * signature would pass as one that expires in 2034 (2026100614 read as a timestamp).
	127	+ *
	128	+ * @param int $attachmentId
	129	+ * @param int $expires Unix timestamp.
	130	+ * @return string
	131	+ */
	132	+ public static function signature($attachmentId, $expires)
	133	+ {
	134	+ return hash_hmac('sha256', 'v2|' . $attachmentId . '|' . (int) $expires, wp_salt('secure_auth'));
	135	+ }
	136	+
	137	+ /**
	138	+ * Signature of a pre-2.4.1 URL, valid for one UTC hour.
	139	+ *
	140	+ * @param int $attachmentId
	141	+ * @param string $hourWindow gmdate('YmdH')
	142	+ * @return string
	143	+ */
	144	+ public static function legacySignature($attachmentId, $hourWindow)
	145	+ {
	146	+ return hash_hmac('sha256', $attachmentId . '|' . $hourWindow, wp_salt('secure_auth'));
64	147	}
65	148	}