forked from adammatthews/YOURLS-Plugin--Share-Files
/
plugin.php
203 lines (167 loc) · 8.58 KB
/
plugin.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
<?php
/*
Plugin Name: Upload & Shorten
Plugin URI: https://github.com/fredl99/YOURLS-Upload-and-Shorten
Description: Upload a file and create a short-YOURL for it in one step.
Version: 1.3.1/stable
Author: Fredl
Author URI: https://github.com/fredl99
*/
// No direct call
if( !defined( 'YOURLS_ABSPATH' ) ) die();
// Register our plugin admin page
yourls_add_action( 'plugins_loaded', 'my_upload_and_shorten_add_page' );
function my_upload_and_shorten_add_page() {
// load custom text domain
yourls_load_custom_textdomain( 'upload-and-shorten', dirname(__FILE__) . '/l10n/' );
// create entry in the admin's plugin menu
yourls_register_plugin_page( 'upload-and-shorten', 'Upload & Shorten', 'my_upload_and_shorten_do_page' );
// parameters: page slug, page title, and function that will display the page itself
}
function my_say__($message) {
$my_upload_and_shorten_domain = 'upload-and-shorten';
return yourls_esc_html__($message, $my_upload_and_shorten_domain );
}
// Display admin page
function my_upload_and_shorten_do_page() {
// Check if a form was submitted
$my_save_files_message = '';
if(isset($_POST['submit']) && $_POST['submit'] != '') $my_save_files_message = my_upload_and_shorten_save_files();
// input form
echo '
<h2>Upload & Shorten</h2>
<h3>'.my_say__("Send a file to your webserver and create a short-URL for it.").'</h3>
<p><strong>'.$my_save_files_message.'</strong></p>
<form method="post" enctype="multipart/form-data">
<fieldset> <legend>'.my_say__("Select a file ").'</legend>
<p><input type="file" id="file_upload" name="file_upload" /></p>
</fieldset>';
// YOURLS options
echo '
<fieldset> <legend>'.my_say__("YOURLS database options").'</legend>
<p><label for="custom_shortname">'.my_say__("Custom shortname: ").'</label>
<input type="text" id="custom_shortname" name="custom_shortname" />
<label for="custom_title">'.my_say__("Custom title: ").'</label>
<input type="text" id="custom_title" name="custom_title" /></p>
</fieldset>';
// filename handling
echo '
<fieldset> <legend>'.my_say__("Filename conversions (optional)").'</legend>
<p><input type="radio" id="plain_filename" name="convert_filename" value="original" checked="checked" />
<label for="plain_filename">'.my_say__("No conversion ").'</label>
<small>('.my_say__("Filename will not be changed at all.").')<br/ >
Ex.: "my_filename.txt" -> http://domain.tld/my_filename.txt </small></p>
<p><input type="radio" id="safe_filename" name="convert_filename" value="browser-safe" />
<label for="safe_filename">'.my_say__("Browser-safe filename ").'</label>
<small>('.my_say__("Recommended if the file should be accessed by web-browsers.").')<br/ >
Ex.: "my not safe&clean filename #1.txt" -> http://domain.tld/my_not_safe_clean_filename_1.txt </small></p>
<p><input type="radio" id="random_filename" name="convert_filename" value="randomized" />
<label for="random_filename">'.my_say__("Randomize filename ").'</label>
<small>('.my_say__("Browser-safe filenames with a slight protection against systematic crawling your web-directory.").')<br/ >
Ex.: "mypicture.jpg" -> http://domain.tld/9a3e97434689.jpg </small></p>
<p><input type="checkbox" id="drop_extension" name="drop_extension" />
<label for="drop_extension">'.my_say__("Drop extension ").'</label>
<small>('.my_say__("Hide the filetype. Can be combined with above options.").') <br/ >
Ex.: "mypicture.jpg" -> http://domain.tld/mypicture or http://domain.tld/9a3e97434689 <br/ >
<strong>'.my_say__("Some webservers won't send correct headers and web-browsers may not handle the file correctly.").'</strong></small></p>
</fieldset>';
// do it!
echo '
<p><input type="submit" name="submit" value="'.my_say__(" Go! ").'" /></p>';
// shameless plug :)
echo '
</form>
<div id="footer">
<form action="https://www.paypal.com/cgi-bin/webscr" method="post" target="_paypal">
<input type="hidden" name="cmd" value="_s-xclick">
<input type="hidden" name="hosted_button_id" value="H5B9UKVYP88X4">'
.my_say__("This plugin is hosted at ").'<a href="https://github.com/fredl99/YOURLS-Upload-and-Shorten" target="_blank">GitHub</a>. '
.my_say__("If you like it, remember someone spends his time working on it. ")
.my_say__("A cup of coffee might stimulate further improvements. ;-) ")
.'<br/ ><input type="image" src="https://www.paypalobjects.com/en_GB/i/btn/btn_donate_SM.gif" border="0" name="submit" alt="PayPal – The safer, easier way to pay online!">
</form>
</div>';
}
// Update option in database
function my_upload_and_shorten_save_files() {
// did the user select any file?
if ($_FILES['file_upload']['error'] == UPLOAD_ERR_NO_FILE) {
return my_say__('You need to select a file to upload.');
}
else $my_save_files_message = '';
// yes!
$my_url = SHARE_URL; // has to be defined in user/config.php like this:
// define( 'SHARE_URL', 'http://my.domain.tld/directory/' );
$my_uploaddir = SHARE_DIR; // has to be defined in user/config.php like this:
// define( 'SHARE_DIR', '/full/path/to/httpd/directory/' );
// Handle the filename's extension
$my_upload_extension = pathinfo($_FILES['file_upload']['name'], PATHINFO_EXTENSION);
// If there is any extension at all then append it with a leading dot
if(isset($my_upload_extension) && $my_upload_extension != NULL) {
$my_extension = '.' . $my_upload_extension;
}
// If the following option is checked then drop the filename's extension to obfuscate the filetype.
// Beware: Some webservers won't send an appropriate HTTP-Header then!
if(isset($_POST['drop_extension']) && $_POST['drop_extension'] = "checked" ) {
$my_extension = '';
}
$my_upload_filename = pathinfo($_FILES['file_upload']['name'], PATHINFO_FILENAME);
if(isset($_POST['convert_filename'])) {
switch ($_POST['convert_filename']) {
case 'original': {
$my_filename = $my_upload_filename;
}
break;
case 'browser-safe': {
// make the filename web-safe:
$my_filename_trim = trim($my_upload_filename);
$my_RemoveChars = array( "([^()_\-\.,0-9a-zA-Z\[\]])" ); // replace what's NOT in here!
$my_filename = preg_replace($my_RemoveChars, "_", $my_filename_trim);
$my_filename = preg_replace( "(_{2,})", "_", $my_filename);
$my_extension = preg_replace($my_RemoveChars, "_", $my_extension);
$my_extension = preg_replace( "(_{2,})", "_", $my_extension);
}
break;
case 'randomized': {
// make up a random name for the uploaded file
// see http://www.mattytemple.com/projects/yourls-share-files/?replytocom=26686#respond (seems vanished...)
// (seems vanished...)
$my_filename = substr(md5($my_upload_filename.strtotime("now")), 0, 12);
// end randomize filename
}
break;
}
}
// avoid duplicate filenames
$my_count = 2;
$my_path = $my_uploaddir.$my_filename.$my_extension;
$my_final_file_name = $my_filename.$my_extension;
while(file_exists($my_path)) {
$my_path = $my_uploaddir.$my_filename.'.'.$my_count.$my_extension;
$my_final_file_name = $my_filename.'.'.$my_count.$my_extension;
$my_count++;
}
$my_upload_fullname = pathinfo($_FILES['file_upload']['name'], PATHINFO_BASENAME);
// move the file from /tmp/ to destination and initiate link creation
if(move_uploaded_file($_FILES['file_upload']['tmp_name'], $my_path)) {
// On success:
// obey custom shortname, if given:
$my_custom_shortname = '';
if(isset($_POST['custom_shortname']) && $_POST['custom_shortname'] != NULL) {
$my_custom_shortname = $_POST['custom_shortname'];
}
// change custom title, if given. Default is original filename, but if user provided one, use it:
$my_custom_title = $_POST['convert_filename'].': '.$my_upload_fullname;
if(isset($_POST['custom_title']) && $_POST['custom_title'] != NULL) {
$my_custom_title = $_POST['custom_title'];
}
// let YOURLS create the link:
$my_short_url = yourls_add_new_link($my_url.$my_final_file_name, $my_custom_shortname, $my_custom_title);
return '<font color="green">"'.$my_upload_fullname.'"'.my_say__(" successfully sent. These are the links to your file:").'</font><br />'.
my_say__("Direct: ").'<a href="'.$my_url.$my_final_file_name.'" target="_blank">'.$my_url.$my_final_file_name.'</a><br />'.
my_say__("Short: ").'<a href="'.$my_short_url['shorturl'].'" target="_blank">'.$my_short_url['shorturl'].'</a>';
}
else {
return '<font color="red">'.my_say__("Upload failed, sorry! The error was ").$_FILES['file_upload']['error'].'</font>';
}
}