3 function wfSpecialUpload()
6 $form = new UploadForm( $wgRequest );
11 var $mUploadAffirm, $mUploadFile, $mUploadDescription, $mIgnoreWarning;
12 var $mUploadSaveName, $mUploadTempName, $mUploadSize, $mUploadOldVersion;
13 var $mUploadCopyStatus, $mUploadSource, $mReUpload, $mAction, $mUpload;
14 var $mOname, $mSessionKey;
16 function UploadForm( &$request ) {
17 $this->mUploadAffirm
= $request->getVal( 'wpUploadAffirm' );
18 $this->mUploadFile
= $request->getVal( 'wpUploadFile' );
19 $this->mUploadDescription
= $request->getVal( 'wpUploadDescription');
20 $this->mIgnoreWarning
= $request->getVal( 'wpIgnoreWarning');
21 $this->mUploadSaveName
= $request->getVal( 'wpUploadSaveName');
22 $this->mUploadTempName
= $request->getVal( 'wpUploadTempName');
23 $this->mUploadTempName
= $request->getVal( 'wpUploadTempName');
24 $this->mUploadSize
= $request->getVal( 'wpUploadSize');
25 $this->mUploadOldVersion
= $request->getVal( 'wpUploadOldVersion');
26 $this->mUploadCopyStatus
= $request->getVal( 'wpUploadCopyStatus');
27 $this->mUploadSource
= $request->getVal( 'wpUploadSource');
28 $this->mReUpload
= $request->getCheck( 'wpReUpload' );
29 $this->mAction
= $request->getVal( 'action' );
30 $this->mUpload
= $request->getCheck( 'wpUpload' );
31 $this->mSessionKey
= $request->getVal( 'wpSessionKey' );
33 if ( ! $this->mUploadTempName
) {
34 $this->mUploadTempName
= @$_FILES['wpUploadFile']['tmp_name'];
36 if ( ! $this->mUploadSize
) {
37 $this->mUploadSize
= @$_FILES['wpUploadFile']['size'];
39 $this->mOname
= $request->getGPCVal( $_FILES['wpUploadFile'], 'name', "" );
44 global $wgUser, $wgOut;
45 global $wgDisableUploads;
47 if ( $wgDisableUploads ) {
48 $wgOut->addWikiText( wfMsg( "uploaddisabled" ) );
51 if ( ( 0 == $wgUser->getID() )
52 or $wgUser->isBlocked() ) {
53 $wgOut->errorpage( "uploadnologin", "uploadnologintext" );
57 $wgOut->readOnlyPage();
60 if ( $this->mReUpload
) {
61 $this->unsaveUploadedFile();
62 $this->mainUploadForm( "" );
63 } else if ( "submit" == $this->mAction ||
$this->mUpload
) {
64 $this->processUpload();
66 $this->mainUploadForm( "" );
71 function processUpload()
73 global $wgUser, $wgOut, $wgLang;
74 global $wgUploadDirectory;
75 global $wgSavedFile, $wgUploadOldVersion;
76 global $wgUseCopyrightUpload, $wgCheckCopyrightUpload;
77 global $wgCheckFileExtensions, $wgStrictFileExtensions;
78 global $wgFileExtensions, $wgFileBlacklist, $wgUploadSizeWarning;
80 if ( $wgUseCopyrightUpload ) {
81 $this->mUploadAffirm
= 1;
82 if ($wgCheckCopyrightUpload &&
83 (trim ( $this->mUploadCopyStatus
) == "" ||
trim ( $this->mUploadSource
) == "" )) {
84 $this->mUploadAffirm
= 0;
88 if ( 1 != $this->mUploadAffirm
) {
89 $this->mainUploadForm( WfMsg( "noaffirmation" ) );
93 if ( "" != $this->mOname
) {
94 $basename = strrchr( $this->mOname
, "/" );
95 if ( false === $basename ) { $basename = $this->mOname
; }
96 else ( $basename = substr( $basename, 1 ) );
98 $ext = strrchr( $basename, "." );
99 if ( false === $ext ) { $ext = ""; }
100 else { $ext = substr( $ext, 1 ); }
102 if ( "" == $ext ) { $xl = 0; } else { $xl = strlen( $ext ) +
1; }
103 $partname = substr( $basename, 0, strlen( $basename ) - $xl );
105 if ( strlen( $partname ) < 3 ) {
106 $this->mainUploadForm( WfMsg( "minlength" ) );
109 $nt = Title
::newFromText( $basename );
111 return $this->uploadError( wfMsg( "illegalfilename", htmlspecialchars( $basename ) ) );
113 $nt->setNamespace( Namespace::getImage() );
114 $this->mUploadSaveName
= $nt->getDBkey();
116 /* Don't allow users to override the blacklist */
117 if( $this->checkFileExtension( $ext, $wgFileBlacklist ) ||
118 ($wgStrictFileExtensions && !$this->checkFileExtension( $ext, $wgFileExtensions ) ) ) {
119 return $this->uploadError( wfMsg( "badfiletype", htmlspecialchars( $ext ) ) );
122 $this->saveUploadedFile( $this->mUploadSaveName
, $this->mUploadTempName
);
123 if ( !$nt->userCanEdit() ) {
124 return $this->uploadError( wfMsg( "protectedpage" ) );
127 if ( ! $this->mIgnoreWarning
) {
129 if( 0 != strcmp( ucfirst( $basename ), $this->mUploadSaveName
) ) {
130 $warning .= '<li>'.wfMsg( "badfilename", htmlspecialchars( $this->mUploadSaveName
) ).'</li>';
133 if ( $wgCheckFileExtensions ) {
134 if ( ! $this->checkFileExtension( $ext, $wgFileExtensions ) ) {
135 $warning .= '<li>'.wfMsg( "badfiletype", htmlspecialchars( $ext ) ).'</li>';
138 if ( $wgUploadSizeWarning && ( $this->mUploadSize
> $wgUploadSizeWarning ) ) {
139 $warning .= '<li>'.wfMsg( "largefile" ).'</li>';
141 if ( $this->mUploadSize
== 0 ) {
142 $warning .= '<li>'.wfMsg( "emptyfile" ).'</li>';
144 if( $nt->getArticleID() ) {
145 $sk = $wgUser->getSkin();
146 $dname = $wgLang->getNsText( Namespace::getImage() ) . ":{$this->mUploadSaveName}";
147 $dlink = $sk->makeKnownLink( $dname, $dname );
148 $warning .= '<li>'.wfMsg( "fileexists", $dlink ).'</li>';
150 if($warning != '') return $this->uploadWarning($warning);
153 if ( !is_null( $this->mUploadOldVersion
) ) {
154 $wgUploadOldVersion = $this->mUploadOldVersion
;
156 wfRecordUpload( $this->mUploadSaveName
, $wgUploadOldVersion, $this->mUploadSize
,
157 $this->mUploadDescription
, $this->mUploadCopyStatus
, $this->mUploadSource
);
159 $sk = $wgUser->getSkin();
160 $ilink = $sk->makeMediaLink( $this->mUploadSaveName
, Image
::wfImageUrl( $this->mUploadSaveName
) );
161 $dname = $wgLang->getNsText( Namespace::getImage() ) . ":{$this->mUploadSaveName}";
162 $dlink = $sk->makeKnownLink( $dname, $dname );
164 $wgOut->addHTML( "<h2>" . wfMsg( "successfulupload" ) . "</h2>\n" );
165 $text = wfMsg( "fileuploaded", $ilink, $dlink );
166 $wgOut->addHTML( "<p>{$text}\n" );
167 $wgOut->returnToMain( false );
170 function checkFileExtension( $ext, $list ) {
171 return in_array( strtolower( $ext ), $list );
174 function saveUploadedFile( $saveName, $tempName )
176 global $wgSavedFile, $wgUploadOldVersion;
177 global $wgUploadDirectory, $wgOut;
179 $dest = wfImageDir( $saveName );
180 $archive = wfImageArchiveDir( $saveName );
181 $wgSavedFile = "{$dest}/{$saveName}";
183 if ( is_file( $wgSavedFile ) ) {
184 $wgUploadOldVersion = gmdate( "YmdHis" ) . "!{$saveName}";
186 if ( ! rename( $wgSavedFile, "${archive}/{$wgUploadOldVersion}" ) ) {
187 $wgOut->fileRenameError( $wgSavedFile,
188 "${archive}/{$wgUploadOldVersion}" );
192 $wgUploadOldVersion = "";
194 if ( ! move_uploaded_file( $tempName, $wgSavedFile ) ) {
195 $wgOut->fileCopyError( $tempName, $wgSavedFile );
197 chmod( $wgSavedFile, 0644 );
200 function unsaveUploadedFile()
202 global $wgUploadDirectory, $wgOut, $wgRequest;
204 $wgSavedFile = $_SESSION['wsUploadFiles'][$this->mSessionKey
];
205 $wgUploadOldVersion = $this->mUploadOldVersion
;
207 if ( ! @unlink
( $wgSavedFile ) ) {
208 $wgOut->fileDeleteError( $wgSavedFile );
211 if ( "" != $wgUploadOldVersion ) {
212 $hash = md5( substr( $wgUploadOldVersion, 15 ) );
213 $archive = "{$wgUploadDirectory}/archive/" . $hash{0} .
214 "/" . substr( $hash, 0, 2 );
216 if ( ! rename( "{$archive}/{$wgUploadOldVersion}", $wgSavedFile ) ) {
217 $wgOut->fileRenameError( "{$archive}/{$wgUploadOldVersion}",
223 function uploadError( $error )
226 $sub = wfMsg( "uploadwarning" );
227 $wgOut->addHTML( "<h2>{$sub}</h2>\n" );
228 $wgOut->addHTML( "<h4><font color=red>{$error}</font></h4>\n" );
231 function uploadWarning( $warning )
233 global $wgOut, $wgUser, $wgLang, $wgUploadDirectory, $wgRequest;
234 global $wgSavedFile, $wgUploadOldVersion;
235 global $wgUseCopyrightUpload;
237 # wgSavedFile is stored in the session not the form, for security
238 $this->mSessionKey
= mt_rand( 0, 0x7fffffff );
239 $_SESSION['wsUploadFiles'][$this->mSessionKey
] = $wgSavedFile;
241 $sub = wfMsg( "uploadwarning" );
242 $wgOut->addHTML( "<h2>{$sub}</h2>\n" );
243 $wgOut->addHTML( "<ul class='warning'>{$warning}</ul><br/>\n" );
245 $save = wfMsg( "savefile" );
246 $reupload = wfMsg( "reupload" );
247 $iw = wfMsg( "ignorewarning" );
248 $reup = wfMsg( "reuploaddesc" );
249 $titleObj = Title
::makeTitle( NS_SPECIAL
, "Upload" );
250 $action = $titleObj->escapeLocalURL( "action=submit" );
252 if ( $wgUseCopyrightUpload )
255 <input type=hidden name=\"wpUploadCopyStatus\" value=\"" . htmlspecialchars( $this->mUploadCopyStatus
) . "\">
256 <input type=hidden name=\"wpUploadSource\" value=\"" . htmlspecialchars( $this->mUploadSource
) . "\">
263 <form id=\"uploadwarning\" method=\"post\" enctype=\"multipart/form-data\"
264 action=\"{$action}\">
265 <input type=hidden name=\"wpUploadAffirm\" value=\"1\">
266 <input type=hidden name=\"wpIgnoreWarning\" value=\"1\">
267 <input type=hidden name=\"wpUploadDescription\" value=\"" . htmlspecialchars( $this->mUploadDescription
) . "\">
269 <input type=hidden name=\"wpUploadSaveName\" value=\"" . htmlspecialchars( $this->mUploadSaveName
) . "\">
270 <input type=hidden name=\"wpUploadTempName\" value=\"" . htmlspecialchars( $this->mUploadTempName
) . "\">
271 <input type=hidden name=\"wpUploadSize\" value=\"" . htmlspecialchars( $this->mUploadSize
) . "\">
272 <input type=hidden name=\"wpSessionKey\" value=\"" . htmlspecialchars( $this->mSessionKey
) . "\">
273 <input type=hidden name=\"wpUploadOldVersion\" value=\"" . htmlspecialchars( $wgUploadOldVersion) . "\">
276 <input tabindex=2 type=submit name=\"wpUpload\" value=\"{$save}\">
277 </td><td align=left>{$iw}</td></tr>
279 <input tabindex=2 type=submit name=\"wpReUpload\" value=\"{$reupload}\">
280 </td><td align=left>{$reup}</td></tr></table></form>\n" );
283 function mainUploadForm( $msg )
285 global $wgOut, $wgUser, $wgLang, $wgUploadDirectory, $wgRequest;
286 global $wgUseCopyrightUpload;
289 $sub = wfMsg( "uploaderror" );
290 $wgOut->addHTML( "<h2>{$sub}</h2>\n" .
291 "<h4><font color=red>{$msg}</font></h4>\n" );
293 $sub = wfMsg( "uploadfile" );
294 $wgOut->addHTML( "<h2>{$sub}</h2>\n" );
296 $wgOut->addHTML( "<p>" . wfMsg( "uploadtext" ) );
297 $sk = $wgUser->getSkin();
299 $fn = wfMsg( "filename" );
300 $fd = wfMsg( "filedesc" );
301 $ulb = wfMsg( "uploadbtn" );
303 $clink = $sk->makeKnownLink( wfMsg( "copyrightpage" ),
304 wfMsg( "copyrightpagename" ) );
305 $ca = wfMsg( "affirmation", $clink );
306 $iw = wfMsg( "ignorewarning" );
308 $titleObj = Title
::makeTitle( NS_SPECIAL
, "Upload" );
309 $action = $titleObj->escapeLocalURL();
313 <input tabindex=3 type=checkbox name=\"wpUploadAffirm\" value=\"1\" id=\"wpUploadAffirm\">
314 </td><td align=left><label for=\"wpUploadAffirm\">{$ca}</label></td>
316 if ( $wgUseCopyrightUpload )
319 <td align=right nowrap>" . wfMsg ( "filestatus" ) . ":</td>
320 <td><input tabindex=3 type=text name=\"wpUploadCopyStatus\" value=\"" .
321 htmlspecialchars($this->mUploadCopyStatus
). "\" size=40></td>
323 <td align=right>". wfMsg ( "filesource" ) . ":</td>
324 <td><input tabindex=4 type=text name=\"wpUploadSource\" value=\"" .
325 htmlspecialchars($this->mUploadSource
). "\" size=40></td>
330 <form id=\"upload\" method=\"post\" enctype=\"multipart/form-data\"
331 action=\"{$action}\">
333 <td align=right>{$fn}:</td><td align=left>
334 <input tabindex=1 type=file name=\"wpUploadFile\" value=\""
335 . htmlspecialchars( $this->mUploadFile
) . "\" size=40>
337 <td align=right>{$fd}:</td><td align=left>
338 <input tabindex=2 type=text name=\"wpUploadDescription\" value=\""
339 . htmlspecialchars( $this->mUploadDescription
) . "\" size=40>
343 <tr><td> </td><td align=left>
344 <input tabindex=5 type=submit name=\"wpUpload\" value=\"{$ulb}\">
345 </td></tr></table></form>\n" );