core-bundle/src/Resources/contao/forms/FormFileUpload.php
public function validate()
	{
		// No file specified
		if (!isset($_FILES[$this->strName]) || empty($_FILES[$this->strName]['name']))
		{
			if ($this->mandatory)
			{
				if ($this->strLabel == '')
				{
					$this->addError($GLOBALS['TL_LANG']['ERR']['mdtryNoLabel']);
				}
				else
				{
					$this->addError(sprintf($GLOBALS['TL_LANG']['ERR']['mandatory'], $this->strLabel));
				}
			}

			return;
		}

		$file = $_FILES[$this->strName];
		$maxlength_kb = $this->getMaximumUploadSize();
		$maxlength_kb_readable = $this->getReadableSize($maxlength_kb);

		// Sanitize the filename
		try
		{
			$file['name'] = StringUtil::sanitizeFileName($file['name']);
		}
		catch (\InvalidArgumentException $e)
		{
			$this->addError($GLOBALS['TL_LANG']['ERR']['filename']);

			return;
		}

		// Invalid file name
		if (!Validator::isValidFileName($file['name']))
		{
			$this->addError($GLOBALS['TL_LANG']['ERR']['filename']);

			return;
		}

		// File was not uploaded
		if (!is_uploaded_file($file['tmp_name']))
		{
			if ($file['error'] == 1 || $file['error'] == 2)
			{
				$this->addError(sprintf($GLOBALS['TL_LANG']['ERR']['filesize'], $maxlength_kb_readable));
			}
			elseif ($file['error'] == 3)
			{
				$this->addError(sprintf($GLOBALS['TL_LANG']['ERR']['filepartial'], $file['name']));
			}
			elseif ($file['error'] > 0)
			{
				$this->addError(sprintf($GLOBALS['TL_LANG']['ERR']['fileerror'], $file['error'], $file['name']));
			}

			unset($_FILES[$this->strName]);

			return;
		}

		// File is too big
		if ($file['size'] > $maxlength_kb)
		{
			$this->addError(sprintf($GLOBALS['TL_LANG']['ERR']['filesize'], $maxlength_kb_readable));
			unset($_FILES[$this->strName]);

			return;
		}

		$objFile = new File($file['name']);
		$uploadTypes = StringUtil::trimsplit(',', strtolower($this->extensions));

		// File type is not allowed
		if (!\in_array($objFile->extension, $uploadTypes))
		{
			$this->addError(sprintf($GLOBALS['TL_LANG']['ERR']['filetype'], $objFile->extension));
			unset($_FILES[$this->strName]);

			return;
		}

		if ($arrImageSize = @getimagesize($file['tmp_name']))
		{
			$intImageWidth = Config::get('imageWidth');

			// Image exceeds maximum image width
			if ($intImageWidth > 0 && $arrImageSize[0] > $intImageWidth)
			{
				$this->addError(sprintf($GLOBALS['TL_LANG']['ERR']['filewidth'], $file['name'], Config::get('imageWidth')));
				unset($_FILES[$this->strName]);

				return;
			}

			$intImageHeight = Config::get('imageHeight');

			// Image exceeds maximum image height
			if ($intImageHeight > 0 && $arrImageSize[1] > $intImageHeight)
			{
				$this->addError(sprintf($GLOBALS['TL_LANG']['ERR']['fileheight'], $file['name'], Config::get('imageHeight')));
				unset($_FILES[$this->strName]);

				return;
			}
		}

		// Store file in the session and optionally on the server
		if (!$this->hasErrors())
		{
			$_SESSION['FILES'][$this->strName] = $_FILES[$this->strName];

			if ($this->storeFile)
			{
				$intUploadFolder = $this->uploadFolder;

				// Overwrite the upload folder with user's home directory
				if ($this->useHomeDir && FE_USER_LOGGED_IN)
				{
					$this->import(FrontendUser::class, 'User');

					if ($this->User->assignDir && $this->User->homeDir)
					{
						$intUploadFolder = $this->User->homeDir;
					}
				}

				$objUploadFolder = FilesModel::findByUuid($intUploadFolder);

				// The upload folder could not be found
				if ($objUploadFolder === null)
				{
					throw new \Exception("Invalid upload folder ID $intUploadFolder");
				}

				$strUploadFolder = $objUploadFolder->path;
				$rootDir = System::getContainer()->getParameter('kernel.project_dir');

				// Store the file if the upload folder exists
				if ($strUploadFolder != '' && is_dir($rootDir . '/' . $strUploadFolder))
				{
					$this->import(Files::class, 'Files');

					// Do not overwrite existing files
					if ($this->doNotOverwrite && file_exists($rootDir . '/' . $strUploadFolder . '/' . $file['name']))
					{
						$offset = 1;

						$arrAll = scan($rootDir . '/' . $strUploadFolder);
						$arrFiles = preg_grep('/^' . preg_quote($objFile->filename, '/') . '.*\.' . preg_quote($objFile->extension, '/') . '/', $arrAll);

						foreach ($arrFiles as $strFile)
						{
							if (preg_match('/__[0-9]+\.' . preg_quote($objFile->extension, '/') . '$/', $strFile))
							{
								$strFile = str_replace('.' . $objFile->extension, '', $strFile);
								$intValue = (int) substr($strFile, (strrpos($strFile, '_') + 1));

								$offset = max($offset, $intValue);
							}
						}

						$file['name'] = str_replace($objFile->filename, $objFile->filename . '__' . ++$offset, $file['name']);
					}

					// Move the file to its destination
					$this->Files->move_uploaded_file($file['tmp_name'], $strUploadFolder . '/' . $file['name']);
					$this->Files->chmod($strUploadFolder . '/' . $file['name'], 0666 & ~umask());

					$strUuid = null;
					$strFile = $strUploadFolder . '/' . $file['name'];

					// Generate the DB entries
					if (Dbafs::shouldBeSynchronized($strFile))
					{
						$objModel = FilesModel::findByPath($strFile);

						if ($objModel === null)
						{
							$objModel = Dbafs::addResource($strFile);
						}

						$strUuid = StringUtil::binToUuid($objModel->uuid);

						// Update the hash of the target folder
						Dbafs::updateFolderHashes($strUploadFolder);
					}

					// Add the session entry (see #6986)
					$_SESSION['FILES'][$this->strName] = array
					(
						'name'     => $file['name'],
						'type'     => $file['type'],
						'tmp_name' => $rootDir . '/' . $strFile,
						'error'    => $file['error'],
						'size'     => $file['size'],
						'uploaded' => true,
						'uuid'     => $strUuid
					);

					// Add a log entry
					$this->log('File "' . $strUploadFolder . '/' . $file['name'] . '" has been uploaded', __METHOD__, TL_FILES);
				}
			}
		}

		unset($_FILES[$this->strName]);
	}
public function validate()
	{
		// No file specified
		if (!isset($_FILES[$this->strName]) || empty($_FILES[$this->strName]['name']))
		{
			if ($this->mandatory)
			{
				if ($this->strLabel == '')
				{
					$this->addError($GLOBALS['TL_LANG']['ERR']['mdtryNoLabel']);
				}
				else
				{
					$this->addError(sprintf($GLOBALS['TL_LANG']['ERR']['mandatory'], $this->strLabel));
				}
			}

			return;
		}

		$file = $_FILES[$this->strName];
		$maxlength_kb = $this->getMaximumUploadSize();
		$maxlength_kb_readable = $this->getReadableSize($maxlength_kb);

		// Sanitize the filename
		try
		{
			$file['name'] = StringUtil::sanitizeFileName($file['name']);
		}
		catch (\InvalidArgumentException $e)
		{
			$this->addError($GLOBALS['TL_LANG']['ERR']['filename']);

			return;
		}

		// Invalid file name
		if (!Validator::isValidFileName($file['name']))
		{
			$this->addError($GLOBALS['TL_LANG']['ERR']['filename']);

			return;
		}

		// File was not uploaded
		if (!is_uploaded_file($file['tmp_name']))
		{
			if ($file['error'] == 1 || $file['error'] == 2)
			{
				$this->addError(sprintf($GLOBALS['TL_LANG']['ERR']['filesize'], $maxlength_kb_readable));
			}
			elseif ($file['error'] == 3)
			{
				$this->addError(sprintf($GLOBALS['TL_LANG']['ERR']['filepartial'], $file['name']));
			}
			elseif ($file['error'] > 0)
			{
				$this->addError(sprintf($GLOBALS['TL_LANG']['ERR']['fileerror'], $file['error'], $file['name']));
			}

			unset($_FILES[$this->strName]);

			return;
		}

		// File is too big
		if ($file['size'] > $maxlength_kb)
		{
			$this->addError(sprintf($GLOBALS['TL_LANG']['ERR']['filesize'], $maxlength_kb_readable));
			unset($_FILES[$this->strName]);

			return;
		}

		$objFile = new File($file['name']);
		$uploadTypes = StringUtil::trimsplit(',', strtolower($this->extensions));

		// File type is not allowed
		if (!\in_array($objFile->extension, $uploadTypes))
		{
			$this->addError(sprintf($GLOBALS['TL_LANG']['ERR']['filetype'], $objFile->extension));
			unset($_FILES[$this->strName]);

			return;
		}

		if ($arrImageSize = @getimagesize($file['tmp_name']))
		{
			$intImageWidth = Config::get('imageWidth');

			// Image exceeds maximum image width
			if ($intImageWidth > 0 && $arrImageSize[0] > $intImageWidth)
			{
				$this->addError(sprintf($GLOBALS['TL_LANG']['ERR']['filewidth'], $file['name'], Config::get('imageWidth')));
				unset($_FILES[$this->strName]);

				return;
			}

			$intImageHeight = Config::get('imageHeight');

			// Image exceeds maximum image height
			if ($intImageHeight > 0 && $arrImageSize[1] > $intImageHeight)
			{
				$this->addError(sprintf($GLOBALS['TL_LANG']['ERR']['fileheight'], $file['name'], Config::get('imageHeight')));
				unset($_FILES[$this->strName]);

				return;
			}
		}

		// Store file in the session and optionally on the server
		if (!$this->hasErrors())
		{
			$_SESSION['FILES'][$this->strName] = $_FILES[$this->strName];

			if ($this->storeFile)
			{
				$intUploadFolder = $this->uploadFolder;

				// Overwrite the upload folder with user's home directory
				if ($this->useHomeDir && FE_USER_LOGGED_IN)
				{
					$this->import(FrontendUser::class, 'User');

					if ($this->User->assignDir && $this->User->homeDir)
					{
						$intUploadFolder = $this->User->homeDir;
					}
				}

				$objUploadFolder = FilesModel::findByUuid($intUploadFolder);

				// The upload folder could not be found
				if ($objUploadFolder === null)
				{
					throw new \Exception("Invalid upload folder ID $intUploadFolder");
				}

				$strUploadFolder = $objUploadFolder->path;
				$rootDir = System::getContainer()->getParameter('kernel.project_dir');

				// Store the file if the upload folder exists
				if ($strUploadFolder != '' && is_dir($rootDir . '/' . $strUploadFolder))
				{
					$this->import(Files::class, 'Files');

					// Do not overwrite existing files
					if ($this->doNotOverwrite && file_exists($rootDir . '/' . $strUploadFolder . '/' . $file['name']))
					{
						$offset = 1;

						$arrAll = scan($rootDir . '/' . $strUploadFolder);
						$arrFiles = preg_grep('/^' . preg_quote($objFile->filename, '/') . '.*\.' . preg_quote($objFile->extension, '/') . '/', $arrAll);

						foreach ($arrFiles as $strFile)
						{
							if (preg_match('/__[0-9]+\.' . preg_quote($objFile->extension, '/') . '$/', $strFile))
							{
								$strFile = str_replace('.' . $objFile->extension, '', $strFile);
								$intValue = (int) substr($strFile, (strrpos($strFile, '_') + 1));

								$offset = max($offset, $intValue);
							}
						}

						$file['name'] = str_replace($objFile->filename, $objFile->filename . '__' . ++$offset, $file['name']);
					}

					// Move the file to its destination
					$this->Files->move_uploaded_file($file['tmp_name'], $strUploadFolder . '/' . $file['name']);
					$this->Files->chmod($strUploadFolder . '/' . $file['name'], 0666 & ~umask());

					$strUuid = null;
					$strFile = $strUploadFolder . '/' . $file['name'];

					// Generate the DB entries
					if (Dbafs::shouldBeSynchronized($strFile))
					{
						$objModel = FilesModel::findByPath($strFile);

						if ($objModel === null)
						{
							$objModel = Dbafs::addResource($strFile);
						}

						$strUuid = StringUtil::binToUuid($objModel->uuid);

						// Update the hash of the target folder
						Dbafs::updateFolderHashes($strUploadFolder);
					}

					// Add the session entry (see #6986)
					$_SESSION['FILES'][$this->strName] = array
					(
						'name'     => $file['name'],
						'type'     => $file['type'],
						'tmp_name' => $rootDir . '/' . $strFile,
						'error'    => $file['error'],
						'size'     => $file['size'],
						'uploaded' => true,
						'uuid'     => $strUuid
					);

					// Add a log entry
					$this->log('File "' . $strUploadFolder . '/' . $file['name'] . '" has been uploaded', __METHOD__, TL_FILES);
				}
			}
		}

		unset($_FILES[$this->strName]);
	}
public function validate ( ) { // No file specified if ( ! isset ( $ _FILES [ $ this -> strName ] ) || empty ( $ _FILES [ $ this -> strName ] [ 'name' ] ) ) { if ( $ this -> mandatory ) { if ( $ this -> strLabel == '' ) { $ this -> addError ( $ GLOBALS [ 'TL_LANG' ] [ 'ERR' ] [ 'mdtryNoLabel' ] ) ; } else { $ this -> addError ( sprintf ( $ GLOBALS [ 'TL_LANG' ] [ 'ERR' ] [ 'mandatory' ] , $ this -> strLabel ) ) ; } } return ; } $ file = $ _FILES [ $ this -> strName ] ; $ maxlength_kb = $ this -> getMaximumUploadSize ( ) ; $ maxlength_kb_readable = $ this -> getReadableSize ( $ maxlength_kb ) ; // Sanitize the filename try { $ file [ 'name' ] = StringUtil :: sanitizeFileName ( $ file [ 'name' ] ) ; } catch ( \ InvalidArgumentException $ e ) { $ this -> addError ( $ GLOBALS [ 'TL_LANG' ] [ 'ERR' ] [ 'filename' ] ) ; return ; } // Invalid file name if ( ! Validator :: isValidFileName ( $ file [ 'name' ] ) ) { $ this -> addError ( $ GLOBALS [ 'TL_LANG' ] [ 'ERR' ] [ 'filename' ] ) ; return ; } // File was not uploaded if ( ! is_uploaded_file ( $ file [ 'tmp_name' ] ) ) { if ( $ file [ 'error' ] == 1 || $ file [ 'error' ] == 2 ) { $ this -> addError ( sprintf ( $ GLOBALS [ 'TL_LANG' ] [ 'ERR' ] [ 'filesize' ] , $ maxlength_kb_readable ) ) ; } elseif ( $ file [ 'error' ] == 3 ) { $ this -> addError ( sprintf ( $ GLOBALS [ 'TL_LANG' ] [ 'ERR' ] [ 'filepartial' ] , $ file [ 'name' ] ) ) ; } elseif ( $ file [ 'error' ] > 0 ) { $ this -> addError ( sprintf ( $ GLOBALS [ 'TL_LANG' ] [ 'ERR' ] [ 'fileerror' ] , $ file [ 'error' ] , $ file [ 'name' ] ) ) ; } unset ( $ _FILES [ $ this -> strName ] ) ; return ; } // File is too big if ( $ file [ 'size' ] > $ maxlength_kb ) { $ this -> addError ( sprintf ( $ GLOBALS [ 'TL_LANG' ] [ 'ERR' ] [ 'filesize' ] , $ maxlength_kb_readable ) ) ; unset ( $ _FILES [ $ this -> strName ] ) ; return ; } $ objFile = new File ( $ file [ 'name' ] ) ; $ uploadTypes = StringUtil :: trimsplit ( ',' , strtolower ( $ this -> extensions ) ) ; // File type is not allowed if ( ! \ in_array ( $ objFile -> extension , $ uploadTypes ) ) { $ this -> addError ( sprintf ( $ GLOBALS [ 'TL_LANG' ] [ 'ERR' ] [ 'filetype' ] , $ objFile -> extension ) ) ; unset ( $ _FILES [ $ this -> strName ] ) ; return ; } if ( $ arrImageSize = @ getimagesize ( $ file [ 'tmp_name' ] ) ) { $ intImageWidth = Config :: get ( 'imageWidth' ) ; // Image exceeds maximum image width if ( $ intImageWidth > 0 && $ arrImageSize [ 0 ] > $ intImageWidth ) { $ this -> addError ( sprintf ( $ GLOBALS [ 'TL_LANG' ] [ 'ERR' ] [ 'filewidth' ] , $ file [ 'name' ] , Config :: get ( 'imageWidth' ) ) ) ; unset ( $ _FILES [ $ this -> strName ] ) ; return ; } $ intImageHeight = Config :: get ( 'imageHeight' ) ; // Image exceeds maximum image height if ( $ intImageHeight > 0 && $ arrImageSize [ 1 ] > $ intImageHeight ) { $ this -> addError ( sprintf ( $ GLOBALS [ 'TL_LANG' ] [ 'ERR' ] [ 'fileheight' ] , $ file [ 'name' ] , Config :: get ( 'imageHeight' ) ) ) ; unset ( $ _FILES [ $ this -> strName ] ) ; return ; } } // Store file in the session and optionally on the server if ( ! $ this -> hasErrors ( ) ) { $ _SESSION [ 'FILES' ] [ $ this -> strName ] = $ _FILES [ $ this -> strName ] ; if ( $ this -> storeFile ) { $ intUploadFolder = $ this -> uploadFolder ; // Overwrite the upload folder with user's home directory if ( $ this -> useHomeDir && FE_USER_LOGGED_IN ) { $ this -> import ( FrontendUser :: class , 'User' ) ; if ( $ this -> User -> assignDir && $ this -> User -> homeDir ) { $ intUploadFolder = $ this -> User -> homeDir ; } } $ objUploadFolder = FilesModel :: findByUuid ( $ intUploadFolder ) ; // The upload folder could not be found if ( $ objUploadFolder === null ) { throw new \ Exception ( "Invalid upload folder ID $intUploadFolder" ) ; } $ strUploadFolder = $ objUploadFolder -> path ; $ rootDir = System :: getContainer ( ) -> getParameter ( 'kernel.project_dir' ) ; // Store the file if the upload folder exists if ( $ strUploadFolder != '' && is_dir ( $ rootDir . '/' . $ strUploadFolder ) ) { $ this -> import ( Files :: class , 'Files' ) ; // Do not overwrite existing files if ( $ this -> doNotOverwrite && file_exists ( $ rootDir . '/' . $ strUploadFolder . '/' . $ file [ 'name' ] ) ) { $ offset = 1 ; $ arrAll = scan ( $ rootDir . '/' . $ strUploadFolder ) ; $ arrFiles = preg_grep ( '/^' . preg_quote ( $ objFile -> filename , '/' ) . '.*\.' . preg_quote ( $ objFile -> extension , '/' ) . '/' , $ arrAll ) ; foreach ( $ arrFiles as $ strFile ) { if ( preg_match ( '/__[0-9]+\.' . preg_quote ( $ objFile -> extension , '/' ) . '$/' , $ strFile ) ) { $ strFile = str_replace ( '.' . $ objFile -> extension , '' , $ strFile ) ; $ intValue = ( int ) substr ( $ strFile , ( strrpos ( $ strFile , '_' ) + 1 ) ) ; $ offset = max ( $ offset , $ intValue ) ; } } $ file [ 'name' ] = str_replace ( $ objFile -> filename , $ objFile -> filename . '__' . ++ $ offset , $ file [ 'name' ] ) ; } // Move the file to its destination $ this -> Files -> move_uploaded_file ( $ file [ 'tmp_name' ] , $ strUploadFolder . '/' . $ file [ 'name' ] ) ; $ this -> Files -> chmod ( $ strUploadFolder . '/' . $ file [ 'name' ] , 0666 & ~ umask ( ) ) ; $ strUuid = null ; $ strFile = $ strUploadFolder . '/' . $ file [ 'name' ] ; // Generate the DB entries if ( Dbafs :: shouldBeSynchronized ( $ strFile ) ) { $ objModel = FilesModel :: findByPath ( $ strFile ) ; if ( $ objModel === null ) { $ objModel = Dbafs :: addResource ( $ strFile ) ; } $ strUuid = StringUtil :: binToUuid ( $ objModel -> uuid ) ; // Update the hash of the target folder Dbafs :: updateFolderHashes ( $ strUploadFolder ) ; } // Add the session entry (see #6986) $ _SESSION [ 'FILES' ] [ $ this -> strName ] = array ( 'name' => $ file [ 'name' ] , 'type' => $ file [ 'type' ] , 'tmp_name' => $ rootDir . '/' . $ strFile , 'error' => $ file [ 'error' ] , 'size' => $ file [ 'size' ] , 'uploaded' => true , 'uuid' => $ strUuid ) ; // Add a log entry $ this -> log ( 'File "' . $ strUploadFolder . '/' . $ file [ 'name' ] . '" has been uploaded' , __METHOD__ , TL_FILES ) ; } } } unset ( $ _FILES [ $ this -> strName ] ) ; }
Validate the input and set the value
Validate the input and set the value