470 lines
16 KiB
PHP
470 lines
16 KiB
PHP
<?php
|
|
/**
|
|
* The model file of file module of ZenTaoPMS.
|
|
*
|
|
* @copyright Copyright 2009-2015 青岛易软天创网络科技有限公司(QingDao Nature Easy Soft Network Technology Co,LTD, www.cnezsoft.com)
|
|
* @license ZPL (http://zpl.pub/page/zplv12.html)
|
|
* @author Chunsheng Wang <chunsheng@cnezsoft.com>
|
|
* @package file
|
|
* @version $Id: model.php 4976 2013-07-02 08:15:31Z wyd621@gmail.com $
|
|
* @link http://www.zentao.net
|
|
*/
|
|
?>
|
|
<?php
|
|
class fileModel extends model
|
|
{
|
|
public $savePath = '';
|
|
public $webPath = '';
|
|
public $now = 0;
|
|
|
|
/**
|
|
* Construct function.
|
|
*
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function __construct()
|
|
{
|
|
parent::__construct();
|
|
$this->now = time();
|
|
$this->setSavePath();
|
|
$this->setWebPath();
|
|
}
|
|
|
|
/**
|
|
* Get files of an object.
|
|
*
|
|
* @param string $objectType
|
|
* @param string $objectID
|
|
* @access public
|
|
* @return array
|
|
*/
|
|
public function getByObject($objectType, $objectID)
|
|
{
|
|
return $this->dao->select('*')->from(TABLE_FILE)->where('objectType')->eq($objectType)->andWhere('objectID')->eq((int)$objectID)->orderBy('id')->fetchAll();
|
|
}
|
|
|
|
/**
|
|
* Get info of a file.
|
|
*
|
|
* @param int $fileID
|
|
* @access public
|
|
* @return object
|
|
*/
|
|
public function getById($fileID)
|
|
{
|
|
$file = $this->dao->findById($fileID)->from(TABLE_FILE)->fetch();
|
|
$file->webPath = $this->webPath . $file->pathname;
|
|
$file->realPath = $this->app->getAppRoot() . "www/data/upload/{$this->app->company->id}/" . $file->pathname;
|
|
return $file;
|
|
}
|
|
|
|
/**
|
|
* Save upload.
|
|
*
|
|
* @param string $objectType
|
|
* @param string $objectID
|
|
* @param string $extra
|
|
* @access public
|
|
* @return array
|
|
*/
|
|
public function saveUpload($objectType = '', $objectID = '', $extra = '')
|
|
{
|
|
$fileTitles = array();
|
|
$now = helper::today();
|
|
$files = $this->getUpload();
|
|
|
|
foreach($files as $id => $file)
|
|
{
|
|
if($file['size'] == 0) continue;
|
|
move_uploaded_file($file['tmpname'], $this->savePath . $file['pathname']);
|
|
$file['objectType'] = $objectType;
|
|
$file['objectID'] = $objectID;
|
|
$file['addedBy'] = $this->app->user->account;
|
|
$file['addedDate'] = $now;
|
|
$file['extra'] = $extra;
|
|
unset($file['tmpname']);
|
|
$this->dao->insert(TABLE_FILE)->data($file)->exec();
|
|
$fileTitles[$this->dao->lastInsertId()] = $file['title'];
|
|
}
|
|
return $fileTitles;
|
|
}
|
|
|
|
/**
|
|
* Get counts of uploaded files.
|
|
*
|
|
* @access public
|
|
* @return int
|
|
*/
|
|
public function getCount()
|
|
{
|
|
return count($this->getUpload());
|
|
}
|
|
|
|
/**
|
|
* Get info of uploaded files.
|
|
*
|
|
* @param string $htmlTagName
|
|
* @access public
|
|
* @return array
|
|
*/
|
|
public function getUpload($htmlTagName = 'files')
|
|
{
|
|
$files = array();
|
|
if(!isset($_FILES[$htmlTagName])) return $files;
|
|
|
|
$this->app->loadClass('purifier', true);
|
|
$config = HTMLPurifier_Config::createDefault();
|
|
$config->set('Cache.DefinitionImpl', null);
|
|
$purifier = new HTMLPurifier($config);
|
|
|
|
/* If the file var name is an array. */
|
|
if(is_array($_FILES[$htmlTagName]['name']))
|
|
{
|
|
extract($_FILES[$htmlTagName]);
|
|
foreach($name as $id => $filename)
|
|
{
|
|
if(empty($filename)) continue;
|
|
if(!validater::checkFileName($filename)) continue;
|
|
$file['extension'] = $this->getExtension($filename);
|
|
$file['pathname'] = $this->setPathName($id, $file['extension']);
|
|
$file['title'] = !empty($_POST['labels'][$id]) ? htmlspecialchars($_POST['labels'][$id]) : str_replace('.' . $file['extension'], '', $filename);
|
|
$file['title'] = $purifier->purify($file['title']);
|
|
$file['size'] = $size[$id];
|
|
$file['tmpname'] = $tmp_name[$id];
|
|
$files[] = $file;
|
|
}
|
|
}
|
|
else
|
|
{
|
|
if(empty($_FILES[$htmlTagName]['name'])) return $files;
|
|
extract($_FILES[$htmlTagName]);
|
|
if(!validater::checkFileName($name)) return array();;
|
|
$file['extension'] = $this->getExtension($name);
|
|
$file['pathname'] = $this->setPathName(0, $file['extension']);
|
|
$file['title'] = !empty($_POST['labels'][0]) ? htmlspecialchars($_POST['labels'][0]) : substr($name, 0, strpos($name, $file['extension']) - 1);
|
|
$file['title'] = $purifier->purify($file['title']);
|
|
$file['size'] = $size;
|
|
$file['tmpname'] = $tmp_name;
|
|
return array($file);
|
|
}
|
|
return $files;
|
|
}
|
|
|
|
/**
|
|
* Get extension of a file.
|
|
*
|
|
* @param string $filename
|
|
* @access public
|
|
* @return string
|
|
*/
|
|
public function getExtension($filename)
|
|
{
|
|
$extension = trim(strtolower(pathinfo($filename, PATHINFO_EXTENSION)));
|
|
if(empty($extension) or strpos($this->config->file->dangers, $extension) !== false) return 'txt';
|
|
if($extension == 'php') return 'txt';
|
|
return $extension;
|
|
}
|
|
|
|
/**
|
|
* Set path name of the uploaded file to be saved.
|
|
*
|
|
* @param int $fileID
|
|
* @param string $extension
|
|
* @access public
|
|
* @return string
|
|
*/
|
|
public function setPathName($fileID, $extension)
|
|
{
|
|
$sessionID = session_id();
|
|
$randString = substr($sessionID, mt_rand(0, strlen($sessionID) - 5), 3);
|
|
return date('Ym/dHis', $this->now) . $fileID . mt_rand(0, 10000) . $randString . '.' . $extension;
|
|
}
|
|
|
|
/**
|
|
* Set save path.
|
|
*
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function setSavePath()
|
|
{
|
|
$savePath = $this->app->getAppRoot() . "www/data/upload/{$this->app->company->id}/" . date('Ym/', $this->now);
|
|
if(!file_exists($savePath))
|
|
{
|
|
@mkdir($savePath, 0777, true);
|
|
touch($savePath . 'index.html');
|
|
}
|
|
$this->savePath = dirname($savePath) . '/';
|
|
}
|
|
|
|
/**
|
|
* Set the web path of upload files.
|
|
*
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function setWebPath()
|
|
{
|
|
$this->webPath = $this->app->getWebRoot() . "data/upload/{$this->app->company->id}/";
|
|
}
|
|
|
|
/**
|
|
* Insert the set image size code.
|
|
*
|
|
* @param string $content
|
|
* @param int $maxSize
|
|
* @access public
|
|
* @return string
|
|
*/
|
|
public function setImgSize($content, $maxSize = 0)
|
|
{
|
|
return str_replace('src="data/upload', 'onload="setImageSize(this,' . $maxSize . ')" src="data/upload', $content);
|
|
}
|
|
|
|
/**
|
|
* Replace a file.
|
|
*
|
|
* @access public
|
|
* @return bool
|
|
*/
|
|
public function replaceFile($fileID, $postName = 'upFile')
|
|
{
|
|
if($files = $this->getUpload($postName))
|
|
{
|
|
$file = $files[0];
|
|
$filePath = $this->dao->select('pathname')->from(TABLE_FILE)->where('id')->eq($fileID)->fetch();
|
|
$pathName = $filePath->pathname;
|
|
$realPathName= $this->savePath . $pathName;
|
|
if(!is_dir(dirname($realPathName)))mkdir(dirname($realPathName));
|
|
move_uploaded_file($file['tmpname'], $realPathName);
|
|
|
|
$fileInfo->addedBy = $this->app->user->account;
|
|
$fileInfo->addedDate = helper::now();
|
|
$fileInfo->size = $file['size'];
|
|
$this->dao->update(TABLE_FILE)->data($fileInfo)->where('id')->eq($fileID)->exec();
|
|
return true;
|
|
}
|
|
else
|
|
{
|
|
return false;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Paste image in kindeditor at firefox and chrome.
|
|
*
|
|
* @param string $data
|
|
* @access public
|
|
* @return string
|
|
*/
|
|
public function pasteImage($data)
|
|
{
|
|
if(empty($data)) return '';
|
|
$data = str_replace('\"', '"', $data);
|
|
|
|
$dataLength = strlen($data);
|
|
if(ini_get('pcre.backtrack_limit') < $dataLength) ini_set('pcre.backtrack_limit', $dataLength);
|
|
preg_match_all('/<img src="(data:image\/(\S+);base64,(\S+))".*\/>/U', $data, $out);
|
|
foreach($out[3] as $key => $base64Image)
|
|
{
|
|
$extension = strtolower($out[2][$key]);
|
|
if(!in_array($extension, $this->config->file->imageExtensions)) die();
|
|
$imageData = base64_decode($base64Image);
|
|
|
|
$file['extension'] = $extension;
|
|
$file['pathname'] = $this->setPathName($key, $file['extension']);
|
|
$file['size'] = strlen($imageData);
|
|
$file['addedBy'] = $this->app->user->account;
|
|
$file['addedDate'] = helper::today();
|
|
$file['title'] = basename($file['pathname']);
|
|
|
|
file_put_contents($this->savePath . $file['pathname'], $imageData);
|
|
$this->dao->insert(TABLE_FILE)->data($file)->exec();
|
|
|
|
$data = str_replace($out[1][$key], $this->webPath . $file['pathname'], $data);
|
|
}
|
|
|
|
return $data;
|
|
}
|
|
|
|
/**
|
|
* Parse CSV.
|
|
*
|
|
* @param string $fileName
|
|
* @access public
|
|
* @return array
|
|
*/
|
|
public function parseCSV($fileName)
|
|
{
|
|
$handle = fopen($fileName, 'r');
|
|
$col = -1;
|
|
$row = 0;
|
|
$data = array();
|
|
while(($line = fgets($handle)) !== false)
|
|
{
|
|
$line = trim($line);
|
|
$markNum = substr_count($line, '"') - substr_count($line, '\"');
|
|
if(substr($line, -1) != ',' and (($markNum % 2 == 1 and $col != -1) or ($markNum % 2 == 0 and substr($line, -2) != ',"' and $col == -1))) $line .= ',';
|
|
$line = str_replace(',"",', ',,', $line);
|
|
$line = str_replace(',"",', ',,', $line);
|
|
$line = preg_replace_callback('/(\"{2,})(\,+)/U', array($this, 'removeInterference'), $line);
|
|
|
|
/* if only one column then line is the data. */
|
|
if(strpos($line, ',') === false and $col == -1)
|
|
{
|
|
$data[$row][0] = trim($line, '"');
|
|
}
|
|
else
|
|
{
|
|
/* if col is not -1, then the data of column is not end. */
|
|
if($col != -1)
|
|
{
|
|
$pos = strpos($line, '",');
|
|
if($pos === false)
|
|
{
|
|
$data[$row][$col] .= "\n" . $line;
|
|
$data[$row][$col] = str_replace(',', ',', trim($data[$row][$col], '"'));
|
|
continue;
|
|
}
|
|
else
|
|
{
|
|
$data[$row][$col] .= "\n" . substr($line, 0, $pos + 1);
|
|
$data[$row][$col] = trim(str_replace(',', ',', trim($data[$row][$col], '"')));
|
|
$line = substr($line, $pos + 2);
|
|
$col++;
|
|
}
|
|
}
|
|
|
|
if($col == -1) $col = 0;
|
|
/* explode cols with delimiter. */
|
|
while($line)
|
|
{
|
|
/* the cell has '"', the delimiter is '",'. */
|
|
if($line{0} == '"')
|
|
{
|
|
$pos = strpos($line, '",');
|
|
if($pos === false)
|
|
{
|
|
$data[$row][$col] = $line;
|
|
/* if end of cell is not '"', then the data of cell is not end. */
|
|
if(strlen($line) == 1 or $line{strlen($line) - 1} != '"') continue 2;
|
|
$line = '';
|
|
}
|
|
else
|
|
{
|
|
$data[$row][$col] = substr($line, 0, $pos + 1);
|
|
$line = substr($line, $pos + 2);
|
|
}
|
|
$data[$row][$col] = str_replace(',', ',', trim($data[$row][$col], '"'));
|
|
}
|
|
else
|
|
{
|
|
/* the delimiter default is ','. */
|
|
$pos = strpos($line, ',');
|
|
/* if line is not delimiter, then line is the data of cell. */
|
|
if($pos === false)
|
|
{
|
|
$data[$row][$col] = $line;
|
|
$line = '';
|
|
}
|
|
else
|
|
{
|
|
$data[$row][$col] = substr($line, 0, $pos);
|
|
$line = substr($line, $pos + 1);
|
|
}
|
|
}
|
|
|
|
$data[$row][$col] = trim(str_replace(',', ',', trim($data[$row][$col], '"')));
|
|
$col++;
|
|
}
|
|
}
|
|
$row ++;
|
|
$col = -1;
|
|
}
|
|
fclose($handle);
|
|
|
|
return $data;
|
|
}
|
|
|
|
/**
|
|
* Remove interference for parse csv.
|
|
*
|
|
* @param array $matchs
|
|
* @access private
|
|
* @return string
|
|
*/
|
|
private function removeInterference($matchs)
|
|
{
|
|
return str_replace('""', '"', $matchs[1]) . str_replace(',', ',', $matchs[2]);
|
|
}
|
|
|
|
/**
|
|
* Extract zip.
|
|
*
|
|
* @param string $zipFile
|
|
* @access public
|
|
* @return string
|
|
*/
|
|
public function extractZip($zipFile)
|
|
{
|
|
$classFile = $this->app->loadClass('zfile');
|
|
$parentPath = $this->app->getCacheRoot() . 'uploadimages/';
|
|
if(!is_dir($parentPath)) mkdir($parentPath, 0777, true);
|
|
|
|
$filePath = $parentPath . str_replace('.zip', '', basename($zipFile)) . '/';
|
|
if(is_dir($filePath)) $classFile->removeDir($filePath);
|
|
mkdir($filePath);
|
|
|
|
$this->app->loadClass('pclzip', true);
|
|
$zip = new pclzip($zipFile);
|
|
$files = $zip->listContent();
|
|
foreach($files as $i => $uploadFile)
|
|
{
|
|
$extension = strtolower(substr(strrchr($uploadFile['filename'], '.'), 1));
|
|
if(empty($extension) or !in_array($extension, $this->config->file->imageExtensions)) return false;
|
|
}
|
|
|
|
$extractedFiles = array();
|
|
foreach($files as $i => $uploadFile)
|
|
{
|
|
$fileName = mb_convert_encoding($uploadFile['filename'], 'UTF-8', 'gb2312');
|
|
|
|
$file = array();
|
|
$file['extension'] = $this->getExtension($fileName);
|
|
$file['pathname'] = $this->setPathName($i, $file['extension']);
|
|
$file['title'] = str_replace(".{$file['extension']}", '', $fileName);
|
|
$file['size'] = $uploadFile['size'];
|
|
|
|
$fileName = basename($file['pathname']);
|
|
$file['realpath'] = $filePath . $fileName;
|
|
$list = $zip->extract(PCLZIP_OPT_BY_NAME, $uploadFile['filename'], PCLZIP_OPT_EXTRACT_AS_STRING);
|
|
if($list)
|
|
{
|
|
file_put_contents($file['realpath'], $list[0]['content']);
|
|
$extractedFiles[$fileName] = $file;
|
|
}
|
|
}
|
|
return $extractedFiles;
|
|
}
|
|
|
|
/**
|
|
* Process editor.
|
|
*
|
|
* @param object $data
|
|
* @param string $editorList
|
|
* @access public
|
|
* @return object
|
|
*/
|
|
public function processEditor($data, $editorList)
|
|
{
|
|
foreach(explode(',', $editorList) as $editorID)
|
|
{
|
|
$editorID = trim($editorID);
|
|
if(empty($editorID) or !isset($data->$editorID)) continue;
|
|
$data->$editorID = $this->pasteImage($data->$editorID);
|
|
}
|
|
return $data;
|
|
}
|
|
}
|