Design/EasySoft-ZenTaoPMS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 30 Wiki Activity

* [refac] refactor code by sonar report https://sq.qc.oop.cc/project/issues\?inNewCodePeriod\=true\&issueStatuses\=OPEN%2CCONFIRMED\&open\=347b5b2a-9d51-43f7-bddd-ceecb30e1b02\&id\=sunhao%3Azentaopms

Browse Source
This commit is contained in:
sunhao
2024-11-27 14:53:07 +08:00
committed by 刘刚
parent b182e8c32c
commit 0a10ded5bd
1 changed files with 73 additions and 63 deletions
Download Patch File Download Diff File Expand all files Collapse all files
www/imgproxy.php
+73 -63
View File
@@ -2,81 +2,91 @@
/* This script proxies image requests to external URLs, ensuring that only image content is fetched and served. */
/* Original source: https://gist.github.com/searsia/e141c4aca4ca1f3bd8a2c04877f4b26e */
$exited = false;
/* Check for url parameter, and prevent file transfer */
if(isset($_GET['url']) && preg_match('#^https?://#', $_GET['url']) === 1)
{
$url = $_GET['url'];
$url = $_GET['url'];
}
else
{
header('HTTP/1.1 404 Not Found');
exit(0);
header('HTTP/1.1 404 Not Found');
$exited = true;
}
/* Check if the client already has the requested item */
if(isset($_SERVER['HTTP_IF_MODIFIED_SINCE']) || isset($_SERVER['HTTP_IF_NONE_MATCH']))
if(!$exited && (isset($_SERVER['HTTP_IF_MODIFIED_SINCE']) || isset($_SERVER['HTTP_IF_NONE_MATCH'])))
{
header('HTTP/1.1 304 Not Modified');
exit(0);
header('HTTP/1.1 304 Not Modified');
$exited = true;
}
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HEADER, true);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 4);
curl_setopt($ch, CURLOPT_BUFFERSIZE, 12800);
curl_setopt($ch, CURLOPT_NOPROGRESS, false);
curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36');
curl_setopt($ch, CURLOPT_PROGRESSFUNCTION, function($downloadSize, $downloaded) { return ($downloaded > 1024 * 4096) ? 1 : 0; } ); // max 4096kb
$version = curl_version();
if($version !== false && ($version['features'] & CURL_VERSION_SSL))
{ // Curl do support SSL
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
}
$response = curl_exec ($ch);
$header_size = curl_getinfo($ch, CURLINFO_HEADER_SIZE);
curl_close ($ch);
$header_blocks = array_filter(preg_split('#\n\s*\n#Uis' , substr($response, 0, $header_size)));
$header_array = explode("\n", array_pop($header_blocks));
$body = substr($response, $header_size);
$headers = [];
foreach($header_array as $header_value)
if(!$exited)
{
$header_pieces = explode(':', $header_value);
if(count($header_pieces) == 2)
{
$headers[strtolower($header_pieces[0])] = trim($header_pieces[1]);
}
}
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HEADER, true);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 4);
curl_setopt($ch, CURLOPT_BUFFERSIZE, 12800);
curl_setopt($ch, CURLOPT_NOPROGRESS, false);
curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36');
curl_setopt($ch, CURLOPT_PROGRESSFUNCTION, function($downloadSize, $downloaded) { return ($downloaded > 1024 * 4096) ? 1 : 0; } ); // max 4096kb
if(array_key_exists('content-type', $headers))
{
$ct = $headers['content-type'];
if(preg_match('#image/png|image/.*icon|image/jpe?g|image/gif|image/webp|image/svg\+xml#', $ct) !== 1)
{
header('HTTP/1.1 404 Not Found');
exit(0);
}
header('Content-Type: ' . $ct);
}
else
{
header('HTTP/1.1 404 Not Found');
exit(0);
}
$version = curl_version();
if($version !== false && ($version['features'] & CURL_VERSION_SSL))
{ // Curl do support SSL
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
}
if(array_key_exists('content-length', $headers)) header('Content-Length: ' . $headers['content-length']);
if(array_key_exists('expires', $headers)) header('Expires: ' . $headers['expires']);
if(array_key_exists('cache-control', $headers)) header('Cache-Control: ' . $headers['cache-control']);
if(array_key_exists('last-modified', $headers)) header('Last-Modified: ' . $headers['last-modified']);
echo $body;
exit(0);
$response = curl_exec ($ch);
$header_size = curl_getinfo($ch, CURLINFO_HEADER_SIZE);
curl_close ($ch);
$header_blocks = array_filter(preg_split('#\n\s*\n#Uis' , substr($response, 0, $header_size)));
$header_array = explode("\n", array_pop($header_blocks));
$body = substr($response, $header_size);
$headers = [];
foreach($header_array as $header_value)
{
$header_pieces = explode(':', $header_value);
if(count($header_pieces) == 2)
{
$headers[strtolower($header_pieces[0])] = trim($header_pieces[1]);
}
}
if(array_key_exists('content-type', $headers))
{
$ct = $headers['content-type'];
if(preg_match('#image/png|image/.*icon|image/jpe?g|image/gif|image/webp|image/svg\+xml#', $ct) !== 1)
{
header('HTTP/1.1 404 Not Found');
$exited = true;
}
else
{
header('Content-Type: ' . $ct);
}
}
else
{
header('HTTP/1.1 404 Not Found');
$exited = true;
}
if(!$exited)
{
if(array_key_exists('content-length', $headers)) header('Content-Length: ' . $headers['content-length']);
if(array_key_exists('expires', $headers)) header('Expires: ' . $headers['expires']);
if(array_key_exists('cache-control', $headers)) header('Cache-Control: ' . $headers['cache-control']);
if(array_key_exists('last-modified', $headers)) header('Last-Modified: ' . $headers['last-modified']);
echo $body;
}
}