david
802479ed64
git-svn-id: https://192.168.0.254/svn/Proyectos.FundacionLQDVI_WebCongresos/trunk@2 94ccb1af-fd9d-d947-8d90-7f70ea60afc8
111 lines
3.8 KiB
PHP
111 lines
3.8 KiB
PHP
<?php
|
|
/**
|
|
* @version $Id: kunena.image.upload.php 2059 2010-03-14 03:42:18Z mahagr $
|
|
* Kunena Component
|
|
* @package Kunena
|
|
*
|
|
* @Copyright (C) 2008 - 2009 Kunena Team All rights reserved
|
|
* @license http://www.gnu.org/copyleft/gpl.html GNU/GPL
|
|
* @link http://www.kunena.com
|
|
*
|
|
* Based on FireBoard Component
|
|
* @Copyright (C) 2006 - 2007 Best Of Joomla All rights reserved
|
|
* @license http://www.gnu.org/copyleft/gpl.html GNU/GPL
|
|
* @link http://www.bestofjoomla.com
|
|
*
|
|
* Based on Joomlaboard Component
|
|
* @copyright (C) 2000 - 2004 TSMF / Jan de Graaff / All Rights Reserved
|
|
* @license http://www.gnu.org/copyleft/gpl.html GNU/GPL
|
|
* @author TSMF & Jan de Graaff
|
|
**/
|
|
|
|
// Dont allow direct linking
|
|
defined( '_JEXEC' ) or die('Restricted access');
|
|
|
|
$fbConfig =& CKunenaConfig::getInstance();
|
|
require_once(KUNENA_PATH_LIB .DS. 'kunena.helpers.php');
|
|
require_once(KUNENA_PATH_LIB .DS. 'kunena.file.class.php');
|
|
|
|
$attachimage = JRequest::getVar('attachimage', NULL, 'FILES', 'array');
|
|
$filename = CKunenaFile::makeSafe($attachimage['name']);
|
|
|
|
function imageUploadError($msg)
|
|
{
|
|
global $message;
|
|
$GLOBALS['KUNENA_rc'] = 0;
|
|
$message = str_replace("[img/]", "", $message);
|
|
$app =& JFactory::getApplication();
|
|
$app->enqueueMessage(_IMAGE_NOT_UPLOADED .' ('. $msg .')', 'notice');
|
|
}
|
|
|
|
$GLOBALS['KUNENA_rc'] = 1; //reset return code
|
|
$filename = explode('.', $filename);
|
|
//some transaltions for readability
|
|
//numExtensions= people tend to upload malicious files using mutliple extensions like: virus.txt.vbs; we'll want to have the last extension to validate against..
|
|
$numExtensions = (count($filename)) - 1;
|
|
//Translate all invalid characters
|
|
$imageName = preg_replace("/[^0-9a-zA-Z_]/", "_", $filename[0]);
|
|
// get the final extension
|
|
$imageExt = $filename[$numExtensions];
|
|
// create the new filename
|
|
$newFileName = $imageName . '.' . $imageExt;
|
|
// Get the Filesize
|
|
$imageSize = $attachimage['size'];
|
|
|
|
//Enforce it is a new file
|
|
if (file_exists(KUNENA_PATH_UPLOADED .DS. "images" .DS. $newFileName)) {
|
|
$newFileName = $imageName . '-' . date('Ymd') . "." . $imageExt;
|
|
for ($i=2; file_exists(KUNENA_PATH_UPLOADED .DS. "images" .DS. $newFileName); $i++) {
|
|
$newFileName = $imageName . '-' . date('Ymd') . "-$i." . $imageExt;
|
|
}
|
|
}
|
|
|
|
if ($GLOBALS['KUNENA_rc'])
|
|
{
|
|
//Filename + proper path
|
|
$imageLocation = strtr(KUNENA_PATH_UPLOADED .DS. "images" .DS. $newFileName, "\\", "/");
|
|
$maxImgSize = $fbConfig->imagesize * 1024;
|
|
|
|
// Check for empty filename
|
|
if (!is_uploaded_file($attachimage['tmp_name']) || empty($attachimage['name'])) {
|
|
imageUploadError(_IMAGE_ERROR_EMPTY);
|
|
}
|
|
// Check for allowed file type (jpeg, gif, png)
|
|
else if (!($imgtype = KUNENA_check_image_type($imageExt))) {
|
|
imageUploadError(_IMAGE_ERROR_TYPE);
|
|
}
|
|
// Check filesize
|
|
else if ($imageSize > $maxImgSize) {
|
|
imageUploadError(_IMAGE_ERROR_SIZE . " (" . $fbConfig->imagesize . "kb)");
|
|
}
|
|
else {
|
|
list($width, $height) = @getimagesize($attachimage['tmp_name']);
|
|
|
|
// Check image width
|
|
if ($width > $fbConfig->imagewidth) {
|
|
imageUploadError(_IMAGE_ERROR_WIDTH . " (" . $fbConfig->imagewidth . " pixels");
|
|
}
|
|
// Check image height
|
|
else if ($height > $fbConfig->imageheight) {
|
|
imageUploadError(_IMAGE_ERROR_HEIGHT . " (" . $fbConfig->imageheight . " pixels");
|
|
}
|
|
}
|
|
}
|
|
|
|
if ($GLOBALS['KUNENA_rc'])
|
|
{
|
|
// file is OK, move it to the proper location
|
|
CKunenaFile::upload($attachimage['tmp_name'], $imageLocation);
|
|
|
|
// echo '<span class="contentheading">'._IMAGE_UPLOADED."...</span>";
|
|
$code = '[img]' . KUNENA_LIVEUPLOADEDPATH. '/images/' . $newFileName . '[/img]';
|
|
|
|
if (preg_match("/\[img\/\]/si", $message)) {
|
|
$message = str_replace("[img/]", $code, $message);
|
|
}
|
|
else {
|
|
$message = $message . ' ' . $code;
|
|
}
|
|
}
|
|
?>
|