upload.php
12 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
<?php
if ( ! defined( 'ABSPATH' ) ) {
exit;
}
/**
* Class NF_FU_Fields_Upload
*/
class NF_FU_Fields_Upload extends NF_Abstracts_Field {
protected $_nicename = 'File Upload';
protected $_parent_type = 'textbox';
protected $_section = 'common';
protected $_templates = 'file_upload';
protected $_icon = 'file';
protected $_test_value = false;
protected $_settings_all_fields = array(
'key',
'label',
'label_pos',
'required',
'classes',
'manual_key',
'help',
'description',
);
public function __construct() {
$this->_name = NF_FU_File_Uploads::TYPE;
$this->_type = NF_FU_File_Uploads::TYPE;
parent::__construct();
$settings = NF_File_Uploads()->config( 'field-settings' );
$this->_settings = array_merge( $this->_settings, $settings );
add_action( 'nf_admin_enqueue_scripts', array( $this, 'admin_enqueue_scripts' ) );
}
/**
* Save the temp file
*
* @param $field
* @param $data
*
* @return mixed
*/
public function process( $field, $data ) {
/*
* If we don't have any files set or we are saving progress, bail early.
*/
if ( ! isset( $field['files'] ) || empty( $field['files'] ) || ( isset ( $data[ 'extra' ][ 'saveProgress' ] ) && ! empty( $data[ 'extra' ][ 'saveProgress' ] ) ) ) {
return $data;
}
$submission_data = array();
// Get common data
$user_id = $this->get_user_id();
$base_dir = NF_File_Uploads()->controllers->uploads->get_path( '' );
$base_url = NF_File_Uploads()->controllers->uploads->get_url( '' );
$base_dir .= $data['form_id'] . '/';
$base_url .= $data['form_id'] . '/';
// Get custom directory using common data for shortcodes
$custom_upload_dir = NF_File_Uploads()->controllers->settings->custom_upload_dir();
$is_custom_upload_dir = false;
NF_File_Uploads()->controllers->custom_paths->set_data( 'formtitle', $data['settings']['title'] );
if ( ! empty( $custom_upload_dir ) ) {
$custom_upload_dir = stripslashes( trim( $custom_upload_dir ) );
$custom_upload_dir = NF_File_Uploads()->controllers->custom_paths->replace_shortcodes( $custom_upload_dir );
$custom_upload_dir = NF_File_Uploads()->controllers->custom_paths->replace_field_shortcodes( $custom_upload_dir, $data['fields'] );
if ( false !== strpos( $custom_upload_dir, '%filename%' ) ) {
$is_custom_upload_dir = true;
}
}
// Loop through all files
foreach ( $field['files'] as $file_key => $file ) {
$tmp_file = NF_FU_Helper::remove_directory_from_file( $file['tmp_name'] );
$tmp_file = NF_File_Uploads()->controllers->uploads->get_path( $tmp_file, true );
if ( ! file_exists( $tmp_file ) ) {
$data['errors']['fields'][ $field['id'] ] = __( 'Temp file does not exist', 'ninja-forms-uploads' );
return $data;
}
// Remove any path from the filename as a security measure
$original_filename = NF_FU_Helper::remove_directory_from_file( $file['name'] );
// Remove the extension from the file name
$file_parts = explode( '.', $original_filename );
$ext = array_pop( $file_parts );
// Check for blacklisted file types
if ( NF_FU_AJAX_Controllers_Uploads::blacklisted( NF_FU_AJAX_Controllers_Uploads::get_extension_blacklist(), str_replace( '_', '', trim( $ext ) ) ) ) {
$data['errors']['fields'][ $field['id'] ] = __( 'File extension not allowed', 'ninja-forms-uploads' );
return $data;
}
if ( ! NF_FU_AJAX_Controllers_Uploads::is_allowed_type( $original_filename ) ) {
$data['errors']['fields'][ $field['id'] ] = __( 'File extension not allowed', 'ninja-forms-uploads' );
return $data;
}
$original_filename_without_ext = implode( '.', $file_parts );
// Set the file uploads mergetag values
Ninja_Forms()->merge_tags[ 'file_uploads' ]->set_filename( $original_filename_without_ext );
Ninja_Forms()->merge_tags[ 'file_uploads' ]->set_extension( $ext );
// Set the filename custom shortcode
NF_File_Uploads()->controllers->custom_paths->set_data( 'filename', $original_filename_without_ext );
$file_name = $original_filename;
// Replace %filename% in custom dir
if ( $is_custom_upload_dir ) {
$custom_upload_dir = NF_File_Uploads()->controllers->custom_paths->replace_shortcode( $custom_upload_dir, 'filename' );
}
// Custom renaming of files
if ( ! empty( $field['upload_rename'] ) ) {
$file_name = apply_filters( 'ninja_forms_merge_tags', $field['upload_rename'] );
$file_name = NF_File_Uploads()->controllers->custom_paths->replace_shortcodes( $file_name );
$file_name = NF_File_Uploads()->controllers->custom_paths->replace_field_shortcodes( $file_name, $data['fields'] );
$ext_suffix = '.' . $ext;
if ( $ext_suffix !== substr( $file_name, - strlen( $ext_suffix ) ) ) {
$file_name .= $ext_suffix;
}
}
$target_file = trailingslashit( $base_dir . ltrim( $custom_upload_dir, '/' ) ) . ltrim( $file_name, '/' );
$target_path = dirname( $target_file );
// Ensure the path exists
wp_mkdir_p( $target_path );
// Sanitize the filename for encoding
$file_name = sanitize_file_name( str_replace( $target_path, '', $target_file ) );
$target_file = $target_path . '/' . $file_name;
if ( file_exists( $target_file ) ) {
// Make sure we use a filename that is unique
$original_target_file = $target_file;
$i = 0;
do {
$i++;
$target_file = str_replace( '.' . $ext, '-' . $i . '.' . $ext, $original_target_file );
} while ( file_exists( $target_file ) );
}
// Get final filename
$file_name = NF_FU_Helper::remove_directory_from_file( $target_file );
// Check file extension isn't blacklisted for final file
$final_file_parts = explode( '.', $file_name );
$final_ext = array_pop( $final_file_parts );
// Check for blacklisted file types
if ( NF_FU_AJAX_Controllers_Uploads::blacklisted( NF_FU_AJAX_Controllers_Uploads::get_extension_blacklist(), str_replace( '_', '', trim( $final_ext ) ) ) ) {
$data['errors']['fields'][ $field['id'] ] = __( 'File extension not allowed', 'ninja-forms-uploads' );
return $data;
}
if ( ! NF_FU_AJAX_Controllers_Uploads::is_allowed_type( $file_name ) ) {
$data['errors']['fields'][ $field['id'] ] = __( 'File extension not allowed', 'ninja-forms-uploads' );
return $data;
}
$custom_path = str_replace( trailingslashit( $base_dir ), '', trailingslashit( $target_path ) );
$file_url = trailingslashit( $base_url . ltrim( $custom_path, '/' ) ) . $file_name;
// Move to permanent location
$result = rename( $tmp_file, $target_file );
if ( false === $result ) {
$data['errors']['fields'][ $field['id'] ] = __( 'File upload error', 'ninja-forms-uploads' );
return $data;
}
// Add to FU table
$file_data = array(
'user_file_name' => $original_filename,
'file_name' => $file_name,
'file_path' => $target_file,
'file_url' => $file_url,
'upload_location' => 'server',
'complete' => 0,
);
$upload_id = NF_File_Uploads()->model->insert( $user_id, $data['form_id'], $field['id'], $file_data );
$file_data['upload_id'] = $upload_id;
$file_data['custom_path'] = $custom_path;
// Save to media library
if ( "1" == $field['media_library'] && "1" == $field['save_to_server']) {
$file_data['attachment_id'] = NF_File_Uploads()->controllers->uploads->create_attachment( $target_file, $file_name );
}
NF_File_Uploads()->model->update( $upload_id, $file_data );
// Store FU data in the processing object
$field['files'][ $file_key ]['data'] = $file_data;
$submission_data[ $upload_id ] = $file_url;
}
foreach ( $data['fields'] as $key => $data_field ) {
if ( $data_field['id'] != $field['id'] ) {
continue;
}
// Set the field value to the array of file upload data
$data['fields'][ $key ]['value'] = $submission_data;
// Persist the data for each file
$data['fields'][ $key ]['files'] = $field['files'];
break;
}
return $data;
}
/**
* Get current logged in user ID
*
* @return int
*/
protected function get_user_id() {
$current_user = wp_get_current_user();
return ( $current_user ) ? $current_user->ID : 0;
}
/**
* Display uploads URL
*
* @param int $id
* @param mixed $value
*
* @return string
*/
public function admin_form_element( $id, $value ) {
if ( ! is_array( $value ) || empty( $value ) ) {
return $value;
}
$new_value = array();
foreach ( $value as $upload_id => $file_url ) {
if ( is_array( $file_url ) ) {
// FU 2.9.x data format
$upload_id = $file_url['upload_id'];
$file_url = $file_url['file_url'];
}
$upload = NF_File_Uploads()->controllers->uploads->get( $upload_id );
if ( ! NF_File_Uploads()->controllers->uploads->file_exists( $upload->data ) ) {
$new_value[] = __( 'File removed', 'ninja-forms-uploads' );
continue;
}
if ( false !== $upload ) {
$file_url = NF_File_Uploads()->controllers->uploads->get_file_url( $file_url, $upload->data );
}
$new_value[] = sprintf( '<a href="%1$s" target="_blank">%2$s</a><br><input class="widefat" disabled type="text" value="%1$s">', $file_url, __( 'View', 'ninja-forms-uploads' ) );
}
return implode( '<br>', $new_value );
}
/**
* Send already saved files to the front end
*
* @param array $settings
* @param int $form_id
*
* @return array
*/
public function localize_settings( $settings, $form_id ) {
// TODO get saved uploads for existing submission
// $files = array();
// $settings['files'] = $files;
$settings['max_chunk_size'] = NF_FU_Helper::get_max_chunk_size();
// If a max file size is defined for the field use that, else you the global setting
$max_file_size_mb = NF_File_Uploads()->controllers->settings->get_max_file_size_mb();
if ( isset( $settings['max_file_size'] ) && ! empty( $settings['max_file_size'] ) ) {
$max_file_size_mb = $settings['max_file_size'];
}
$settings['max_file_size_mb'] = $max_file_size_mb;
$max_file_size = NF_File_Uploads()->controllers->settings->file_size_bytes_from_mb( $max_file_size_mb );
$settings['max_file_size'] = $max_file_size;
$min_file_size_mb = 0;
if ( isset( $settings['min_file_size'] ) && ! empty( $settings['min_file_size'] ) ) {
$min_file_size_mb = $settings['min_file_size'];
}
$settings['min_file_size_mb'] = $min_file_size_mb;
$settings['min_file_size'] = NF_File_Uploads()->controllers->settings->file_size_bytes_from_mb( $min_file_size_mb );
$nonce_data = NF_File_Uploads()->createFieldNonce( $settings['id'] );
$settings['uploadNonce'] = $nonce_data['nonce'];
$settings['uploadNonceExpiry'] = $nonce_data['nonce_expiry'];
$settings['select_files_text'] = ! empty ( $settings['select_files_text'] ) ? $settings['select_files_text'] : apply_filters( 'ninja_forms_upload_select_files_text', __( 'Select Files', 'ninja-forms-uploads' ) );
$settings['cancel_upload_text'] = ! empty ( $settings['cancel_upload_text'] ) ? $settings['cancel_upload_text'] : apply_filters( 'ninja_forms_upload_cancel_upload_text', __( 'Cancel', 'ninja-forms-uploads' ) );
if ( ! empty( $settings['upload_types'] ) ) {
$types = array_map( 'trim', explode( ',', $settings['upload_types'] ) );
if ( in_array( 'jpg', $types ) && ! in_array( 'jpeg', $types ) ) {
$types[] = 'jpeg';
}
array_walk( $types, function ( &$value ) {
$value = '.' . ltrim( $value, '.' );
} );
$settings['upload_types'] = implode( ',', $types );
}
return $settings;
}
/**
* Load admin scripts for the builder
*/
public function admin_enqueue_scripts() {
$ver = NF_File_Uploads()->plugin_version;
$url = plugin_dir_url( NF_File_Uploads()->plugin_file_path );
wp_enqueue_script( 'nf-fu-file-upload', $url . 'assets/js/builder/controllers/fieldFile.js', array( 'nf-builder' ), $ver );
wp_enqueue_script( 'nf-fu-file-upload-mergetags', $url . 'assets/js/builder/controllers/mergeTags.js', array( 'nf-builder' ), $ver );
$mergetag_variants = NF_FU_Integrations_NinjaForms_MergeTags::get_default_tags();
unset( $mergetag_variants['default'] );
$mergetag_variants = array_keys( $mergetag_variants );
wp_localize_script( 'nf-fu-file-upload-mergetags', 'nfFileUploadsAdmin', array(
'mergeTagVariants' => $mergetag_variants,
) );
}
}