Software /
code /
prosody-modules
Annotate
mod_http_upload_external/share.php @ 5405:c7a5caad28ef
mod_http_oauth2: Enforce response type encoded in client_id
The client promises to only use this response type, so we should hold
them to that.
This makes it fail earlier if the response type is disabled or the
client is trying to use one that it promised not to use. Better than
failing after login and consent.
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Tue, 02 May 2023 16:31:25 +0200 |
parent | 4310:b0ad1604f77e |
rev | line source |
---|---|
2333
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
1 <?php |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
2 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
3 /* |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
4 PHP script to handle file uploads and downloads for Prosody's mod_http_upload_external |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
5 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
6 Tested with Apache 2.2+ and PHP 5.3+ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
7 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
8 ** Why this script? |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
9 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
10 This script only allows uploads that have been authorized by mod_http_upload_external. It |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
11 attempts to make the upload/download as safe as possible, considering that there are *many* |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
12 security concerns involved with allowing arbitrary file upload/download on a web server. |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
13 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
14 With that said, I do not consider myself a PHP developer, and at the time of writing, this |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
15 code has had no external review. Use it at your own risk. I make no claims that this code |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
16 is secure. |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
17 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
18 ** How to use? |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
19 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
20 Drop this file somewhere it will be served by your web server. Edit the config options below. |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
21 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
22 In Prosody set: |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
23 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
24 http_upload_external_base_url = "https://your.example.com/path/to/share.php/" |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
25 http_upload_external_secret = "this is your secret string" |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
26 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
27 ** License |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
28 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
29 (C) 2016 Matthew Wild <mwild1@gmail.com> |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
30 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
31 Permission is hereby granted, free of charge, to any person obtaining a copy of this software |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
32 and associated documentation files (the "Software"), to deal in the Software without restriction, |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
33 including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
34 and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
35 subject to the following conditions: |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
36 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
37 The above copyright notice and this permission notice shall be included in all copies or substantial |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
38 portions of the Software. |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
39 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
40 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
41 BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
42 NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
43 DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
44 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
45 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
46 */ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
47 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
48 /*\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\*/ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
49 /* CONFIGURATION OPTIONS */ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
50 /*\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\*/ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
51 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
52 /* Change this to a directory that is writable by your web server, but is outside your web root */ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
53 $CONFIG_STORE_DIR = '/tmp'; |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
54 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
55 /* This must be the same as 'http_upload_external_secret' that you set in Prosody's config file */ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
56 $CONFIG_SECRET = 'this is your secret string'; |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
57 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
58 /* For people who need options to tweak that they don't understand... here you are */ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
59 $CONFIG_CHUNK_SIZE = 4096; |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
60 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
61 /*\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\*/ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
62 /* END OF CONFIGURATION */ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
63 /*\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\*/ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
64 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
65 /* Do not edit below this line unless you know what you are doing (spoiler: nobody does) */ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
66 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
67 $upload_file_name = substr($_SERVER['PHP_SELF'], strlen($_SERVER['SCRIPT_NAME'])+1); |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
68 $store_file_name = $CONFIG_STORE_DIR . '/store-' . hash('sha256', $upload_file_name); |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
69 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
70 $request_method = $_SERVER['REQUEST_METHOD']; |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
71 |
3226
3b13f19652e2
mod_http_upload_external: Update share.php and share_v2.php to allow cross-domain requests
Matthew Wild <mwild1@gmail.com>
parents:
3216
diff
changeset
|
72 /* Set CORS headers */ |
3b13f19652e2
mod_http_upload_external: Update share.php and share_v2.php to allow cross-domain requests
Matthew Wild <mwild1@gmail.com>
parents:
3216
diff
changeset
|
73 header('Access-Control-Allow-Methods: GET, PUT, OPTIONS'); |
3b13f19652e2
mod_http_upload_external: Update share.php and share_v2.php to allow cross-domain requests
Matthew Wild <mwild1@gmail.com>
parents:
3216
diff
changeset
|
74 header('Access-Control-Allow-Headers: Content-Type'); |
3b13f19652e2
mod_http_upload_external: Update share.php and share_v2.php to allow cross-domain requests
Matthew Wild <mwild1@gmail.com>
parents:
3216
diff
changeset
|
75 header('Access-Control-Max-Age: 7200'); |
3b13f19652e2
mod_http_upload_external: Update share.php and share_v2.php to allow cross-domain requests
Matthew Wild <mwild1@gmail.com>
parents:
3216
diff
changeset
|
76 header('Access-Control-Allow-Origin: *'); |
3b13f19652e2
mod_http_upload_external: Update share.php and share_v2.php to allow cross-domain requests
Matthew Wild <mwild1@gmail.com>
parents:
3216
diff
changeset
|
77 |
2333
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
78 if(array_key_exists('v', $_GET) === TRUE && $request_method === 'PUT') { |
2979
9480ca61294d
mod_http_upload_external: Fix syntax error in share.php
Matthew Wild <mwild1@gmail.com>
parents:
2977
diff
changeset
|
79 $upload_file_size = $_SERVER['CONTENT_LENGTH']; |
2333
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
80 $upload_token = $_GET['v']; |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
81 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
82 $calculated_token = hash_hmac('sha256', "$upload_file_name $upload_file_size", $CONFIG_SECRET); |
3216
5d35e6b409e0
mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents:
2979
diff
changeset
|
83 if(function_exists('hash_equals')) { |
5d35e6b409e0
mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents:
2979
diff
changeset
|
84 if(hash_equals($calculated_token, $upload_token) !== TRUE) { |
5d35e6b409e0
mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents:
2979
diff
changeset
|
85 error_log("Token mismatch: calculated $calculated_token got $upload_token"); |
5d35e6b409e0
mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents:
2979
diff
changeset
|
86 header('HTTP/1.0 403 Forbidden'); |
5d35e6b409e0
mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents:
2979
diff
changeset
|
87 exit; |
5d35e6b409e0
mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents:
2979
diff
changeset
|
88 } |
2333
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
89 } |
3216
5d35e6b409e0
mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents:
2979
diff
changeset
|
90 else { |
5d35e6b409e0
mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents:
2979
diff
changeset
|
91 if($upload_token !== $calculated_token) { |
5d35e6b409e0
mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents:
2979
diff
changeset
|
92 error_log("Token mismatch: calculated $calculated_token got $upload_token"); |
5d35e6b409e0
mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents:
2979
diff
changeset
|
93 header('HTTP/1.0 403 Forbidden'); |
5d35e6b409e0
mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents:
2979
diff
changeset
|
94 exit; |
5d35e6b409e0
mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents:
2979
diff
changeset
|
95 } |
5d35e6b409e0
mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents:
2979
diff
changeset
|
96 } |
2333
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
97 /* Open a file for writing */ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
98 $store_file = fopen($store_file_name, 'x'); |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
99 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
100 if($store_file === FALSE) { |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
101 header('HTTP/1.0 409 Conflict'); |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
102 exit; |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
103 } |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
104 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
105 /* PUT data comes in on the stdin stream */ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
106 $incoming_data = fopen('php://input', 'r'); |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
107 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
108 /* Read the data a chunk at a time and write to the file */ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
109 while ($data = fread($incoming_data, $CONFIG_CHUNK_SIZE)) { |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
110 fwrite($store_file, $data); |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
111 } |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
112 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
113 /* Close the streams */ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
114 fclose($incoming_data); |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
115 fclose($store_file); |
4310
b0ad1604f77e
mod_http_upload_external: update php scripts to return HTTP 201 Created on upload
Richard Schwab <hgprosodyim-lawrpxz9uw@central-intelligence.agency>
parents:
3227
diff
changeset
|
116 |
b0ad1604f77e
mod_http_upload_external: update php scripts to return HTTP 201 Created on upload
Richard Schwab <hgprosodyim-lawrpxz9uw@central-intelligence.agency>
parents:
3227
diff
changeset
|
117 // https://xmpp.org/extensions/xep-0363.html#upload |
b0ad1604f77e
mod_http_upload_external: update php scripts to return HTTP 201 Created on upload
Richard Schwab <hgprosodyim-lawrpxz9uw@central-intelligence.agency>
parents:
3227
diff
changeset
|
118 // A HTTP status Code of 201 means that the server is now ready to serve the file via the provided GET URL. |
b0ad1604f77e
mod_http_upload_external: update php scripts to return HTTP 201 Created on upload
Richard Schwab <hgprosodyim-lawrpxz9uw@central-intelligence.agency>
parents:
3227
diff
changeset
|
119 header('HTTP/1.0 201 Created'); |
b0ad1604f77e
mod_http_upload_external: update php scripts to return HTTP 201 Created on upload
Richard Schwab <hgprosodyim-lawrpxz9uw@central-intelligence.agency>
parents:
3227
diff
changeset
|
120 exit; |
2333
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
121 } else if($request_method === 'GET' || $request_method === 'HEAD') { |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
122 // Send file (using X-Sendfile would be nice here...) |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
123 if(file_exists($store_file_name)) { |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
124 header('Content-Disposition: attachment'); |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
125 header('Content-Type: application/octet-stream'); |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
126 header('Content-Length: '.filesize($store_file_name)); |
3227
62c82d097017
mod_http_upload_external: share.php: Fix whitespace
Matthew Wild <mwild1@gmail.com>
parents:
3226
diff
changeset
|
127 header("Content-Security-Policy: \"default-src 'none'\""); |
62c82d097017
mod_http_upload_external: share.php: Fix whitespace
Matthew Wild <mwild1@gmail.com>
parents:
3226
diff
changeset
|
128 header("X-Content-Security-Policy: \"default-src 'none'\""); |
62c82d097017
mod_http_upload_external: share.php: Fix whitespace
Matthew Wild <mwild1@gmail.com>
parents:
3226
diff
changeset
|
129 header("X-WebKit-CSP: \"default-src 'none'\""); |
2333
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
130 if($request_method !== 'HEAD') { |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
131 readfile($store_file_name); |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
132 } |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
133 } else { |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
134 header('HTTP/1.0 404 Not Found'); |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
135 } |
3226
3b13f19652e2
mod_http_upload_external: Update share.php and share_v2.php to allow cross-domain requests
Matthew Wild <mwild1@gmail.com>
parents:
3216
diff
changeset
|
136 } else if($request_method === 'OPTIONS') { |
2333
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
137 } else { |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
138 header('HTTP/1.0 400 Bad Request'); |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
139 } |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
140 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
141 exit; |