3 function wfSpecialUpload()
6 $form = new UploadForm( $wgRequest );
11 var $mUploadAffirm, $mUploadFile, $mUploadDescription, $mIgnoreWarning;
12 var $mUploadSaveName, $mUploadTempName, $mUploadSize, $mUploadOldVersion;
13 var $mUploadCopyStatus, $mUploadSource, $mReUpload, $mAction, $mUpload;
14 var $mOname, $mSessionKey;
16 function UploadForm( &$request ) {
17 $this->mUploadAffirm
= $request->getVal( 'wpUploadAffirm' );
18 $this->mUploadFile
= $request->getVal( 'wpUploadFile' );
19 $this->mUploadDescription
= $request->getVal( 'wpUploadDescription');
20 $this->mIgnoreWarning
= $request->getVal( 'wpIgnoreWarning');
21 $this->mUploadSaveName
= $request->getVal( 'wpUploadSaveName');
22 $this->mUploadTempName
= $request->getVal( 'wpUploadTempName');
23 $this->mUploadTempName
= $request->getVal( 'wpUploadTempName');
24 $this->mUploadSize
= $request->getVal( 'wpUploadSize');
25 $this->mUploadOldVersion
= $request->getVal( 'wpUploadOldVersion');
26 $this->mUploadCopyStatus
= $request->getVal( 'wpUploadCopyStatus');
27 $this->mUploadSource
= $request->getVal( 'wpUploadSource');
28 $this->mReUpload
= $request->getCheck( 'wpReUpload' );
29 $this->mAction
= $request->getVal( 'action' );
30 $this->mUpload
= $request->getCheck( 'wpUpload' );
31 $this->mSessionKey
= $request->getVal( 'wpSessionKey' );
33 if ( ! $this->mUploadTempName
) {
34 $this->mUploadTempName
= @$_FILES['wpUploadFile']['tmp_name'];
36 if ( ! $this->mUploadSize
) {
37 $this->mUploadSize
= @$_FILES['wpUploadFile']['size'];
39 $this->mOname
= $request->getGPCVal( $_FILES['wpUploadFile'], 'name', "" );
44 global $wgUser, $wgOut;
45 global $wgDisableUploads;
47 if ( $wgDisableUploads ) {
48 $wgOut->addWikiText( wfMsg( "uploaddisabled" ) );
51 if ( ( 0 == $wgUser->getID() )
52 or $wgUser->isBlocked() ) {
53 $wgOut->errorpage( "uploadnologin", "uploadnologintext" );
57 $wgOut->readOnlyPage();
60 if ( $this->mReUpload
) {
61 $this->unsaveUploadedFile();
62 $this->mainUploadForm( "" );
63 } else if ( "submit" == $this->mAction ||
$this->mUpload
) {
64 $this->processUpload();
66 $this->mainUploadForm( "" );
71 function processUpload()
73 global $wgUser, $wgOut, $wgLang;
74 global $wgUploadDirectory;
75 global $wgSavedFile, $wgUploadOldVersion;
76 global $wgUseCopyrightUpload, $wgCheckCopyrightUpload;
77 global $wgCheckFileExtensions, $wgStrictFileExtensions;
78 global $wgFileExtensions, $wgFileBlacklist, $wgUploadSizeWarning;
80 if ( $wgUseCopyrightUpload ) {
81 $this->mUploadAffirm
= 1;
82 if ($wgCheckCopyrightUpload &&
83 (trim ( $this->mUploadCopyStatus
) == "" ||
trim ( $this->mUploadSource
) == "" )) {
84 $this->mUploadAffirm
= 0;
88 if ( 1 != $this->mUploadAffirm
) {
89 $this->mainUploadForm( WfMsg( "noaffirmation" ) );
93 if ( "" != $this->mOname
) {
94 $basename = strrchr( $this->mOname
, "/" );
95 if ( false === $basename ) { $basename = $this->mOname
; }
96 else ( $basename = substr( $basename, 1 ) );
98 $ext = strrchr( $basename, "." );
99 if ( false === $ext ) { $ext = ""; }
100 else { $ext = substr( $ext, 1 ); }
102 if ( "" == $ext ) { $xl = 0; } else { $xl = strlen( $ext ) +
1; }
103 $partname = substr( $basename, 0, strlen( $basename ) - $xl );
105 if ( strlen( $partname ) < 3 ) {
106 $this->mainUploadForm( WfMsg( "minlength" ) );
109 $nt = Title
::newFromText( $basename );
111 return $this->uploadError( wfMsg( "illegalfilename", htmlspecialchars( $basename ) ) );
113 $nt->setNamespace( Namespace::getImage() );
114 $this->mUploadSaveName
= $nt->getDBkey();
116 /* Don't allow users to override the blacklist */
117 if( $this->checkFileExtension( $ext, $wgFileBlacklist ) ||
118 ($wgStrictFileExtensions && !$this->checkFileExtension( $ext, $wgFileExtensions ) ) ) {
119 return $this->uploadError( wfMsg( "badfiletype", htmlspecialchars( $ext ) ) );
122 $this->saveUploadedFile( $this->mUploadSaveName
, $this->mUploadTempName
);
123 if ( !$nt->userCanEdit() ) {
124 return $this->uploadError( wfMsg( "protectedpage" ) );
127 if ( ! $this->mIgnoreWarning
) {
129 if( 0 != strcmp( ucfirst( $basename ), $this->mUploadSaveName
) ) {
130 $warning .= '<li>'.wfMsg( "badfilename", htmlspecialchars( $this->mUploadSaveName
) ).'</li>';
133 if ( $wgCheckFileExtensions ) {
134 if ( ! $this->checkFileExtension( $ext, $wgFileExtensions ) ) {
135 $warning .= '<li>'.wfMsg( "badfiletype", htmlspecialchars( $ext ) ).'</li>';
138 if ( $wgUploadSizeWarning && ( $this->mUploadSize
> $wgUploadSizeWarning ) ) {
139 $warning .= '<li>'.wfMsg( "largefile" ).'</li>';
141 if( $nt->getArticleID() ) {
142 $sk = $wgUser->getSkin();
143 $dname = $wgLang->getNsText( Namespace::getImage() ) . ":{$this->mUploadSaveName}";
144 $dlink = $sk->makeKnownLink( $dname, $dname );
145 $warning .= '<li>'.wfMsg( "fileexists", $dlink ).'</li>';
147 if($warning != '') return $this->uploadWarning($warning);
150 if ( !is_null( $this->mUploadOldVersion
) ) {
151 $wgUploadOldVersion = $this->mUploadOldVersion
;
153 wfRecordUpload( $this->mUploadSaveName
, $wgUploadOldVersion, $this->mUploadSize
,
154 $this->mUploadDescription
, $this->mUploadCopyStatus
, $this->mUploadSource
);
156 $sk = $wgUser->getSkin();
157 $ilink = $sk->makeMediaLink( $this->mUploadSaveName
, Image
::wfImageUrl( $this->mUploadSaveName
) );
158 $dname = $wgLang->getNsText( Namespace::getImage() ) . ":{$this->mUploadSaveName}";
159 $dlink = $sk->makeKnownLink( $dname, $dname );
161 $wgOut->addHTML( "<h2>" . wfMsg( "successfulupload" ) . "</h2>\n" );
162 $text = wfMsg( "fileuploaded", $ilink, $dlink );
163 $wgOut->addHTML( "<p>{$text}\n" );
164 $wgOut->returnToMain( false );
167 function checkFileExtension( $ext, $list ) {
168 return in_array( strtolower( $ext ), $list );
171 function saveUploadedFile( $saveName, $tempName )
173 global $wgSavedFile, $wgUploadOldVersion;
174 global $wgUploadDirectory, $wgOut;
176 $dest = wfImageDir( $saveName );
177 $archive = wfImageArchiveDir( $saveName );
178 $wgSavedFile = "{$dest}/{$saveName}";
180 if ( is_file( $wgSavedFile ) ) {
181 $wgUploadOldVersion = gmdate( "YmdHis" ) . "!{$saveName}";
183 if ( ! rename( $wgSavedFile, "${archive}/{$wgUploadOldVersion}" ) ) {
184 $wgOut->fileRenameError( $wgSavedFile,
185 "${archive}/{$wgUploadOldVersion}" );
189 $wgUploadOldVersion = "";
191 if ( ! move_uploaded_file( $tempName, $wgSavedFile ) ) {
192 $wgOut->fileCopyError( $tempName, $wgSavedFile );
194 chmod( $wgSavedFile, 0644 );
197 function unsaveUploadedFile()
199 global $wgUploadDirectory, $wgOut, $wgRequest;
201 $wgSavedFile = $_SESSION['wsUploadFiles'][$this->mSessionKey
];
202 $wgUploadOldVersion = $this->mUploadOldVersion
;
204 if ( ! @unlink
( $wgSavedFile ) ) {
205 $wgOut->fileDeleteError( $wgSavedFile );
208 if ( "" != $wgUploadOldVersion ) {
209 $hash = md5( substr( $wgUploadOldVersion, 15 ) );
210 $archive = "{$wgUploadDirectory}/archive/" . $hash{0} .
211 "/" . substr( $hash, 0, 2 );
213 if ( ! rename( "{$archive}/{$wgUploadOldVersion}", $wgSavedFile ) ) {
214 $wgOut->fileRenameError( "{$archive}/{$wgUploadOldVersion}",
220 function uploadError( $error )
223 $sub = wfMsg( "uploadwarning" );
224 $wgOut->addHTML( "<h2>{$sub}</h2>\n" );
225 $wgOut->addHTML( "<h4><font color=red>{$error}</font></h4>\n" );
228 function uploadWarning( $warning )
230 global $wgOut, $wgUser, $wgLang, $wgUploadDirectory, $wgRequest;
231 global $wgSavedFile, $wgUploadOldVersion;
232 global $wgUseCopyrightUpload;
234 # wgSavedFile is stored in the session not the form, for security
235 $this->mSessionKey
= mt_rand( 0, 0x7fffffff );
236 $_SESSION['wsUploadFiles'][$this->mSessionKey
] = $wgSavedFile;
238 $sub = wfMsg( "uploadwarning" );
239 $wgOut->addHTML( "<h2>{$sub}</h2>\n" );
240 $wgOut->addHTML( "<ul class='warning'>{$warning}</ul><br/>\n" );
242 $save = wfMsg( "savefile" );
243 $reupload = wfMsg( "reupload" );
244 $iw = wfMsg( "ignorewarning" );
245 $reup = wfMsg( "reuploaddesc" );
246 $titleObj = Title
::makeTitle( NS_SPECIAL
, "Upload" );
247 $action = $titleObj->escapeLocalURL( "action=submit" );
249 if ( $wgUseCopyrightUpload )
252 <input type=hidden name=\"wpUploadCopyStatus\" value=\"" . htmlspecialchars( $this->mUploadCopyStatus
) . "\">
253 <input type=hidden name=\"wpUploadSource\" value=\"" . htmlspecialchars( $this->mUploadSource
) . "\">
260 <form id=\"uploadwarning\" method=\"post\" enctype=\"multipart/form-data\"
261 action=\"{$action}\">
262 <input type=hidden name=\"wpUploadAffirm\" value=\"1\">
263 <input type=hidden name=\"wpIgnoreWarning\" value=\"1\">
264 <input type=hidden name=\"wpUploadDescription\" value=\"" . htmlspecialchars( $this->mUploadDescription
) . "\">
266 <input type=hidden name=\"wpUploadSaveName\" value=\"" . htmlspecialchars( $this->mUploadSaveName
) . "\">
267 <input type=hidden name=\"wpUploadTempName\" value=\"" . htmlspecialchars( $this->mUploadTempName
) . "\">
268 <input type=hidden name=\"wpUploadSize\" value=\"" . htmlspecialchars( $this->mUploadSize
) . "\">
269 <input type=hidden name=\"wpSessionKey\" value=\"" . htmlspecialchars( $this->mSessionKey
) . "\">
270 <input type=hidden name=\"wpUploadOldVersion\" value=\"" . htmlspecialchars( $wgUploadOldVersion) . "\">
273 <input tabindex=2 type=submit name=\"wpUpload\" value=\"{$save}\">
274 </td><td align=left>{$iw}</td></tr>
276 <input tabindex=2 type=submit name=\"wpReUpload\" value=\"{$reupload}\">
277 </td><td align=left>{$reup}</td></tr></table></form>\n" );
280 function mainUploadForm( $msg )
282 global $wgOut, $wgUser, $wgLang, $wgUploadDirectory, $wgRequest;
283 global $wgUseCopyrightUpload;
286 $sub = wfMsg( "uploaderror" );
287 $wgOut->addHTML( "<h2>{$sub}</h2>\n" .
288 "<h4><font color=red>{$msg}</font></h4>\n" );
290 $sub = wfMsg( "uploadfile" );
291 $wgOut->addHTML( "<h2>{$sub}</h2>\n" );
293 $wgOut->addHTML( "<p>" . wfMsg( "uploadtext" ) );
294 $sk = $wgUser->getSkin();
296 $fn = wfMsg( "filename" );
297 $fd = wfMsg( "filedesc" );
298 $ulb = wfMsg( "uploadbtn" );
300 $clink = $sk->makeKnownLink( wfMsg( "copyrightpage" ),
301 wfMsg( "copyrightpagename" ) );
302 $ca = wfMsg( "affirmation", $clink );
303 $iw = wfMsg( "ignorewarning" );
305 $titleObj = Title
::makeTitle( NS_SPECIAL
, "Upload" );
306 $action = $titleObj->escapeLocalURL();
310 <input tabindex=3 type=checkbox name=\"wpUploadAffirm\" value=\"1\" id=\"wpUploadAffirm\">
311 </td><td align=left><label for=\"wpUploadAffirm\">{$ca}</label></td>
313 if ( $wgUseCopyrightUpload )
316 <td align=right nowrap>" . wfMsg ( "filestatus" ) . ":</td>
317 <td><input tabindex=3 type=text name=\"wpUploadCopyStatus\" value=\"" .
318 htmlspecialchars($this->mUploadCopyStatus
). "\" size=40></td>
320 <td align=right>". wfMsg ( "filesource" ) . ":</td>
321 <td><input tabindex=4 type=text name=\"wpUploadSource\" value=\"" .
322 htmlspecialchars($this->mUploadSource
). "\" size=40></td>
327 <form id=\"upload\" method=\"post\" enctype=\"multipart/form-data\"
328 action=\"{$action}\">
330 <td align=right>{$fn}:</td><td align=left>
331 <input tabindex=1 type=file name=\"wpUploadFile\" value=\""
332 . htmlspecialchars( $this->mUploadFile
) . "\" size=40>
334 <td align=right>{$fd}:</td><td align=left>
335 <input tabindex=2 type=text name=\"wpUploadDescription\" value=\""
336 . htmlspecialchars( $this->mUploadDescription
) . "\" size=40>
340 <tr><td> </td><td align=left>
341 <input tabindex=5 type=submit name=\"wpUpload\" value=\"{$ulb}\">
342 </td></tr></table></form>\n" );