From a14b3baff7301342d9e1cfd26499a809f37eb7ea Mon Sep 17 00:00:00 2001 From: Michael Waskosky Date: Sun, 24 Apr 2016 16:08:57 -0600 Subject: [PATCH] New method to post attachment related data directly Allows posting new attachment file data directly with the $_POST request so that uploads and attachment data can be handled before the post is submitted. Alternate types of attachments also become possible then when overriding the forum attachment shortcodes. Data is posted with JSON instead of PHP Array to avoid the chance of eval() related security issues. --- e107_plugins/forum/forum_post.php | 39 +++++++++++++++++++++++++++++-- 1 file changed, 37 insertions(+), 2 deletions(-) diff --git a/e107_plugins/forum/forum_post.php b/e107_plugins/forum/forum_post.php index bcb27ac82..68e4e4dc9 100644 --- a/e107_plugins/forum/forum_post.php +++ b/e107_plugins/forum/forum_post.php @@ -796,6 +796,18 @@ class forum_post_handler $postInfo['post_attachments'] = e107::serialize($newValues); } + + //Allows directly overriding the method of adding files (or other data) as attachments + if(isset($_POST['post_attachments_json']) && trim($_POST['post_attachments_json'])) + { + $posted_attachments = json_decode($_POST['post_attachments_json'], true); + $attachments_json_errors = json_last_error(); + if($attachments_json_errors === JSON_ERROR_NONE) + { + $postInfo['post_attachments'] = e107::serialize($posted_attachments); + } + } + // var_dump($uploadResult); switch($this->action) @@ -1005,7 +1017,19 @@ class forum_post_handler $postVals['post_attachments'] = e107::serialize($newValues); // $postVals['post_attachments'] = implode(',', $attachments); } - + + //Allows directly overriding the method of adding files (or other data) as attachments + if(isset($_POST['post_attachments_json']) && trim($_POST['post_attachments_json'])) + { + $existingValues = e107::unserialize($this->data['post_attachments']); + $posted_attachments = json_decode($_POST['post_attachments_json'], true); + $attachments_json_errors = json_last_error(); + if($attachments_json_errors === JSON_ERROR_NONE) + { + $postVals['post_attachments'] = e107::serialize(array_merge_recursive($existingValues,$posted_attachments)); + } + } + $postVals['post_edit_datestamp'] = time(); $postVals['post_edit_user'] = USERID; $postVals['post_entry'] = $_POST['post']; @@ -1071,7 +1095,18 @@ class forum_post_handler $postVals['post_attachments'] = e107::serialize($newValues); } - + + //Allows directly overriding the method of adding files (or other data) as attachments + if(isset($_POST['post_attachments_json']) && trim($_POST['post_attachments_json'])) + { + $existingValues = e107::unserialize($this->data['post_attachments']); + $posted_attachments = json_decode($_POST['post_attachments_json'], true); + $attachments_json_errors = json_last_error(); + if($attachments_json_errors === JSON_ERROR_NONE) + { + $postVals['post_attachments'] = e107::serialize(array_merge_recursive($existingValues,$posted_attachments)); + } + } $this->forumObj->postUpdate($this->data['post_id'], $postVals);