X-Git-Url: https://git.cweiske.de/phorkie.git/blobdiff_plain/e17fddb087b19ee3656fb821e8db8ce82bfee37f..9a21a1cba3aa4d263d8e541382cb4ba0103fc19a:/src/phorkie/Repository/Post.php diff --git a/src/phorkie/Repository/Post.php b/src/phorkie/Repository/Post.php index f138491..a61f2a2 100644 --- a/src/phorkie/Repository/Post.php +++ b/src/phorkie/Repository/Post.php @@ -15,20 +15,29 @@ class Repository_Post * * @return boolean True if the post was successful */ - public function process($postData) + public function process($postData, $sessionData) { if (!isset($postData['files'])) { return false; } + if (!$this->hasContent($postData)) { + return false; + } if (!$this->repo) { $this->repo = $this->createRepo(); } $vc = $this->repo->getVc(); - $this->repo->setDescription($postData['description']); + $bChanged = false; + $bCommit = false; + if ($postData['description'] != $this->repo->getDescription()) { + $this->repo->setDescription($postData['description']); + $bChanged = true; + } + foreach ($postData['files'] as $num => $arFile) { $bUpload = false; if ($_FILES['files']['error'][$num]['upload'] == 0) { @@ -39,12 +48,19 @@ class Repository_Post continue; } - $orignalName = $this->sanitizeFilename($arFile['original_name']); - $name = $this->sanitizeFilename($arFile['name']); + $orignalName = Tools::sanitizeFilename($arFile['original_name']); + $name = Tools::sanitizeFilename($arFile['name']); + + if ($arFile['type'] == '_auto_') { + //FIXME: upload + $arFile['type'] = $this->getType($arFile['content']); + } if ($name == '') { if ($bUpload) { - $name = $this->sanitizeFilename($_FILES['files']['name'][$num]['upload']); + $name = Tools::sanitizeFilename( + $_FILES['files']['name'][$num]['upload'] + ); } else { $name = $this->getNextNumberedFile('phork') . '.' . $arFile['type']; @@ -67,12 +83,17 @@ class Repository_Post } else if (isset($arFile['delete']) && $arFile['delete'] == 1) { $bDelete = true; } else if ($orignalName != $name) { - //FIXME: what to do with overwrites? - $vc->getCommand('mv') - ->addArgument($orignalName) - ->addArgument($name) - ->execute(); - $bChanged = true; + if (strpos($name, '/') === false) { + //ignore names with a slash in it, would be new directory + //FIXME: what to do with overwrites? + $vc->getCommand('mv') + ->addArgument($orignalName) + ->addArgument($name) + ->execute(); + $bCommit = true; + } else { + $name = $orignalName; + } } $file = $this->repo->getFileByName($name, false); @@ -80,35 +101,106 @@ class Repository_Post $command = $vc->getCommand('rm') ->addArgument($file->getFilename()) ->execute(); - $bChanged = true; + $bCommit = true; } else if ($bUpload) { move_uploaded_file( - $_FILES['files']['tmp_name'][$num]['upload'], $file->getPath() + $_FILES['files']['tmp_name'][$num]['upload'], + $file->getFullPath() ); $command = $vc->getCommand('add') ->addArgument($file->getFilename()) ->execute(); - $bChanged = true; - } else if ($bNew || $file->getContent() != $arFile['content']) { - file_put_contents($file->getPath(), $arFile['content']); + $bCommit = true; + } else if ($bNew + || (isset($arFile['content']) + && $file->getContent() != $arFile['content'] + ) + ) { + $dir = dirname($file->getFullPath()); + if (!is_dir($dir)) { + mkdir($dir, 0777, true); + } + file_put_contents($file->getFullPath(), $arFile['content']); $command = $vc->getCommand('add') ->addArgument($file->getFilename()) ->execute(); - $bChanged = true; + $bCommit = true; } } - if ($bChanged) { + if (isset($sessionData['identity'])) { + $notes = $sessionData['identity']; + } else { + $notes = $sessionData['ipaddr']; + } + + if ($bCommit) { $vc->getCommand('commit') ->setOption('message', '') ->setOption('allow-empty-message') - ->setOption('author', 'Anonymous ') + ->setOption('no-edit') + ->setOption( + 'author', + $sessionData['name'] . ' <' . $sessionData['email'] . '>' + ) ->execute(); + //FIXME: git needs ref BEFORE add + //quick hack until http://pear.php.net/bugs/bug.php?id=19605 is fixed + //also waiting for https://pear.php.net/bugs/bug.php?id=19623 + $vc->getCommand('notes --ref=identity add') + ->setOption('force') + ->setOption('message', "$notes") + ->execute(); + //update info for dumb git HTTP transport + //the post-update hook should do that IMO, but does not somehow + $vc->getCommand('update-server-info')->execute(); + + $bChanged = true; + } + + if ($bChanged) { + //FIXME: index changed files only + //also handle file deletions + $db = new Database(); + $not = new Notificator(); + if ($bNew) { + $db->getIndexer()->addRepo($this->repo); + $not->create($this->repo); + } else { + $commits = $this->repo->getHistory(); + $db->getIndexer()->updateRepo( + $this->repo, + $commits[count($commits)-1]->committerTime, + $commits[0]->committerTime + ); + $not->edit($this->repo); + } } return true; } + protected function hasContent($postData) + { + foreach ($postData['files'] as $num => $arFile) { + if ($_FILES['files']['error'][$num]['upload'] == 0) { + return true; + } + if (isset($arFile['content']) && $arFile['content'] != '') { + return true; + } + if (isset($arFile['name']) && $arFile['name'] != '') { + //binary files do not have content + return true; + } + if (isset($arFile['delete']) && $arFile['delete'] != '') { + //binary files do not have content + return true; + } + } + return false; + } + public function createRepo() { $rs = new Repositories(); @@ -117,15 +209,14 @@ class Repository_Post $vc->getCommand('init') //this should be setOption, but it fails with a = between name and value ->addArgument('--separate-git-dir') - ->addArgument($GLOBALS['phorkie']['cfg']['gitdir'] . '/' . $repo->id . '.git') - ->addArgument($repo->workDir); + ->addArgument( + $GLOBALS['phorkie']['cfg']['gitdir'] . '/' . $repo->id . '.git' + ) + ->addArgument($repo->workDir) ->execute(); - foreach (glob($repo->gitDir . '/hooks/*') as $hookfile) { - unlink($hookfile); - } - - touch($repo->gitDir . '/git-daemon-export-ok'); + $rs = new Repository_Setup($repo); + $rs->afterInit(); return $repo; } @@ -141,26 +232,36 @@ class Repository_Post return $prefix . $num; } - /** - * Removes malicious parts from a file name - * - * @param string $file File name from the user - * - * @return string Fixed and probably secure filename - */ - public function sanitizeFilename($file) + public function getType($content, $returnError = false) { - $file = trim($file); - $file = str_replace(array('\\', '//'), '/', $file); - $file = str_replace('/../', '/', $file); - if (substr($file, 0, 3) == '../') { - $file = substr($file, 3); + if (getenv('PATH') == '') { + //php-fpm does not fill $PATH by default + // we have to work around that since System::which() uses it + putenv('PATH=/usr/local/bin:/usr/bin:/bin'); } - if (substr($file, 0, 1) == '../') { - $file = substr($file, 1); + + $tmp = tempnam(sys_get_temp_dir(), 'phorkie-autodetect-'); + file_put_contents($tmp, $content); + $type = Tool_MIME_Type_PlainDetect::autoDetect($tmp); + unlink($tmp); + + if ($returnError && $type instanceof \PEAR_Error) { + return $type; } - return $file; + return $this->findExtForType($type); + } + + protected function findExtForType($type) + { + $ext = 'txt'; + foreach ($GLOBALS['phorkie']['languages'] as $lext => $arLang) { + if ($arLang['mime'] == $type) { + $ext = $lext; + break; + } + } + return $ext; } }