mirror of
https://github.com/phpbb/phpbb.git
synced 2025-05-13 19:15:20 +02:00
112 lines
2.4 KiB
PHP
112 lines
2.4 KiB
PHP
<?php
|
|
/**
|
|
*
|
|
* This file is part of the phpBB Forum Software package.
|
|
*
|
|
* @copyright (c) phpBB Limited <https://www.phpbb.com>
|
|
* @license GNU General Public License, version 2 (GPL-2.0)
|
|
*
|
|
* For full copyright and license information, please see
|
|
* the docs/CREDITS.txt file.
|
|
*
|
|
*/
|
|
|
|
namespace phpbb\storage\controller;
|
|
|
|
use phpbb\cache\service;
|
|
use phpbb\config\config;
|
|
use phpbb\db\driver\driver_interface;
|
|
use phpbb\storage\storage;
|
|
use Symfony\Component\HttpFoundation\Request as symfony_request;
|
|
use Symfony\Component\HttpFoundation\ResponseHeaderBag;
|
|
|
|
/**
|
|
* Controller for /download/avatar/{file} routes
|
|
*/
|
|
class avatar extends controller
|
|
{
|
|
/** @var config */
|
|
protected $config;
|
|
|
|
/** @var array */
|
|
protected $allowed_extensions = ['png', 'gif', 'jpg', 'jpeg'];
|
|
|
|
/**
|
|
* Constructor
|
|
*
|
|
* @param service $cache
|
|
* @param config $config
|
|
* @param driver_interface $db
|
|
* @param storage $storage
|
|
* @param symfony_request $symfony_request
|
|
*/
|
|
public function __construct(service $cache, config $config, driver_interface $db, storage $storage, symfony_request $symfony_request)
|
|
{
|
|
parent::__construct($cache, $db, $storage, $symfony_request);
|
|
|
|
$this->config = $config;
|
|
}
|
|
|
|
/**
|
|
* {@inheritdoc}
|
|
*/
|
|
public function handle($file)
|
|
{
|
|
$file = $this->decode_avatar_filename($file);
|
|
|
|
return parent::handle($file);
|
|
}
|
|
|
|
/**
|
|
* {@inheritdoc}
|
|
*/
|
|
protected function is_allowed($file)
|
|
{
|
|
$ext = substr(strrchr($file, '.'), 1);
|
|
|
|
// If filename have point and have an allowed extension
|
|
return strpos($file, '.') && in_array($ext, $this->allowed_extensions);
|
|
}
|
|
|
|
/**
|
|
* Decode avatar filename
|
|
*
|
|
* @param string $file Filename
|
|
*
|
|
* @return string Filename in filesystem
|
|
*/
|
|
protected function decode_avatar_filename($file)
|
|
{
|
|
$avatar_group = false;
|
|
|
|
if (isset($file[0]) && $file[0] === 'g')
|
|
{
|
|
$avatar_group = true;
|
|
$file = substr($file, 1);
|
|
}
|
|
|
|
$ext = substr(strrchr($file, '.'), 1);
|
|
$file = (int) $file;
|
|
|
|
return $this->config['avatar_salt'] . '_' . ($avatar_group ? 'g' : '') . $file . '.' . $ext;
|
|
}
|
|
|
|
/**
|
|
* {@inheritdoc}
|
|
*/
|
|
protected function prepare($file)
|
|
{
|
|
$disposition = $this->response->headers->makeDisposition(
|
|
ResponseHeaderBag::DISPOSITION_INLINE,
|
|
rawurlencode($file)
|
|
);
|
|
|
|
$this->response->headers->set('Content-Disposition', $disposition);
|
|
|
|
$time = new \Datetime();
|
|
$this->response->setExpires($time->modify('+1 year'));
|
|
|
|
parent::prepare($file);
|
|
}
|
|
}
|