<?php
namespace BitApps\FM\Http\Controllers;
use BitApps\FM\Config;
use BitApps\FM\Exception\PreCommandException;
use BitApps\FM\Plugin;
use BitApps\FM\Providers\FileManager\FileManagerProvider;
use BitApps\FM\Providers\FileManager\FileRoot;
use BitApps\FM\Providers\FileManager\Options;
use BitApps\WPKit\Utils\Capabilities;
use Exception;
final class FileManagerController
{
/**
* File Manager connector function
*
* @throws Exception
*/
public function connector()
{
try {
Plugin::instance()->accessControl()->checkPermission(sanitize_key($_REQUEST['cmd']));
$finderProvider = new FileManagerProvider($this->getFinderOptions());
$finderProvider->getFinder()->run();
} catch (Exception $th) {
// phpcs:ignore
echo wp_json_encode(['error' => $th->getMessage()]);
}
wp_die();
}
public function getFinderOptions()
{
$finderOptions = new Options(is_user_logged_in() && \defined('WP_DEBUG') && WP_DEBUG);
$finderOptions->setBind(
'put.pre',
[
Plugin::instance()->fileEditValidator(),
'validate',
]
);
$finderOptions->setBind(
'get.pre file.pre archive.pre back.pre chmod.pre colwidth.pre copy.pre cut.pre duplicate.pre editor.pre put.pre
extract.pre forward.pre fullscreen.pre getfile.pre help.pre home.pre info.pre mkdir.pre mkfile.pre
netmount.pre netunmount.pre open.pre opendir.pre paste.pre places.pre quicklook.pre reload.pre
rename.pre resize.pre restore.pre rm.pre search.pre sort.pre up.pre upload.pre view.pre zipdl.pre
tree.pre parents.pre ls.pre tmb.pre size.pre dim.pre',
[
Plugin::instance()->accessControl(),
'checkPermission',
]
);
$finderOptions->setBind(
'upload',
[Plugin::instance()->mediaSyncs(), 'onFileUpload']
);
// 'zipdl.pre file.pre rename.pre put.pre upload.pre',
$finderOptions->setBind(
'zipdl.pre file.pre rename.pre put.pre upload.pre rm.pre chmod.pre mkdir.pre mkfile.pre extract.pre',
[Plugin::instance()->logger(), 'log']
);
$allVolumes = $this->getFileRoots();
$volumeCount = \count($allVolumes);
$invalidVolumeCount = 0;
foreach ($allVolumes as $root) {
if (!$root->isReadable()) {
$invalidVolumeCount++;
continue;
}
$finderOptions->setRoot($root);
}
if ($volumeCount === $invalidVolumeCount) {
throw new PreCommandException(esc_html__('There is no readable volume. Please select an readable folder from settings', 'file-manager'));
}
return $finderOptions;
}
public function getFileRoots()
{
if (!is_user_logged_in()) {
return $this->guestVolume();
} elseif (is_user_logged_in() && Plugin::instance()->permissions()->isRequestForAdminArea() && Plugin::instance()->permissions()->isDisabledForAdmin()) {
return $this->getDashboardVolumes();
}
return $this->getUserVolumes();
}
public function getUrlByPath($path)
{
return home_url(str_replace(ABSPATH, '', trailingslashit($path)));
}
private function getDashboardVolumes()
{
$mimes = Plugin::instance()->mimes()->getTypes();
$preferences = Plugin::instance()->preferences();
$accessControlProvider = Plugin::instance()->accessControl();
$permissions = Plugin::instance()->permissions();
$baseRoot = new FileRoot(
$preferences->getRootPath(),
$preferences->getRootUrl(),
$preferences->getRootVolumeName()
);
if ($permissions->currentUserRole() !== 'administrator') {
$mimes = $permissions->getEnabledFileType();
$maxUploadSize = $permissions->getMaximumUploadSize();
$baseRoot->setUploadMaxSize($maxUploadSize == 0 ? 0 : $maxUploadSize . 'M');
$denyUploadType = array_diff(Plugin::instance()->mimes()->getTypes(), $mimes);
$baseRoot->setOption('uploadDeny', $denyUploadType);
}
if (is_writable(stripslashes($preferences->getRootPath()) . DIRECTORY_SEPARATOR . '.tmbPath')) {
$baseRoot->setOption('tmbPath', '.tmb');
}
$baseRoot->setUploadAllow($mimes);
$baseRoot->setAccessControl([$accessControlProvider, 'control']);
$baseRoot->setAcceptedName([$accessControlProvider, 'validateName']);
$baseRoot->setDisabled([]);
$baseRoot->setWinHashFix(DIRECTORY_SEPARATOR !== '/');
if (Capabilities::filter(Config::VAR_PREFIX . 'user_can_manage_options')) {
$baseRoot->setAllowChmodReadOnly(true);
$baseRoot->setStatOwner(true);
$baseRoot->setUploadMaxSize(0);
}
$roots[] = $baseRoot;
return $roots;
}
private function getUserVolumes()
{
$permissions = Plugin::instance()->permissions();
$roots[] = $this->processFileRoot(
$permissions->getPathByFolderOption(),
'Public',
$this->getUrlByPath($permissions->getPathByFolderOption())
);
$permissionByRole = $permissions->getByRole($permissions->currentUserRole());
$roots[] = $this->processFileRoot(
$permissionByRole['path'],
$permissions->currentUserRole(),
$this->getUrlByPath($permissionByRole['path'])
);
$permissionByUser = $permissions->getByUser($permissions->currentUserID());
$roots[] = $this->processFileRoot(
$permissionByUser['path'],
$permissions->currentUser()->display_name,
$this->getUrlByPath($permissionByUser['path'])
);
return $roots;
}
private function guestVolume()
{
$permissions = Plugin::instance()->permissions();
$guestPermission = $permissions->getGuestPermissions();
$root = new FileRoot(
$guestPermission['path'],
$this->getUrlByPath($guestPermission['path']),
\array_key_exists('alias', $guestPermission)
? $guestPermission['alias'] : basename($guestPermission['path'])
);
$root->setDisabled(array_diff($permissions->allCommands(), $guestPermission['commands']));
return [$root];
}
/**
* Create Instance of FileRoot
*
* @param string $path
* @param string $alias
* @param string $url
*
* @return FileRoot
*/
private function processFileRoot($path, $alias, $url)
{
$mimes = Plugin::instance()->mimes()->getTypes();
$permissions = Plugin::instance()->permissions();
$accessControlProvider = Plugin::instance()->accessControl();
$volume = new FileRoot(
$path,
$url,
$alias
);
if ($permissions->currentUserRole() !== 'administrator') {
$mimes = $permissions->getEnabledFileType();
$maxUploadSize = $permissions->getMaximumUploadSize();
$volume->setUploadMaxSize($maxUploadSize == 0 ? 0 : $maxUploadSize . 'M');
$denyUploadType = array_diff(Plugin::instance()->mimes()->getTypes(), $mimes);
$volume->setOption('uploadDeny', $denyUploadType);
}
$volume->setUploadAllow($mimes);
$volume->setAccessControl([$accessControlProvider, 'control']);
$volume->setAcceptedName([$accessControlProvider, 'validateName']);
$volume->setDisabled($permissions->getDisabledCommand());
$volume->setWinHashFix(DIRECTORY_SEPARATOR !== '/');
if (Capabilities::filter(Config::VAR_PREFIX . 'user_can_manage_options')) {
$volume->setAllowChmodReadOnly(true);
$volume->setStatOwner(true);
$volume->setUploadMaxSize(0);
}
return $volume;
}
}