aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
Diffstat
-rw-r--r--php/.configuration.php.swpbin12288 -> 0 bytes
-rw-r--r--php/configuration.php27
-rw-r--r--php/database.php55
-rw-r--r--php/node.php43
-rw-r--r--php/readfile.php1
-rw-r--r--php/share.php76
-rw-r--r--sql/fileshare.sql7
7 files changed, 185 insertions, 24 deletions
diff --git a/php/.configuration.php.swp b/php/.configuration.php.swp
deleted file mode 100644
index 56c6cfb..0000000
--- a/php/.configuration.php.swp
+++ /dev/null
Binary files differ
diff --git a/php/configuration.php b/php/configuration.php
index 09d1a06..236db70 100644
--- a/php/configuration.php
+++ b/php/configuration.php
@@ -1,24 +1,25 @@
<?php
/*should be placed outside of document root*/
-$domain_name="localhost";
+$use_https=true;
if (file_exists("/home/alex")) {
- $database_name="alex";
- $database_username="alex";
- $database_password="lol";
- $database_location="127.0.0.1";
+ $domain_name="localhost";
+ $database_name="alex";
+ $database_username="alex";
+ $database_password="lol";
+ $database_location="127.0.0.1";
- $storage_root = "/home/alex/fileup_storage";
+ $storage_root = "/home/alex/fileup_storage";
}
else {
-
-$database_name="fileup_testing";
-$database_username="outsider";
-$database_password="parola123";
-$database_location="localhost";
-/*storage root must be in the webroot*/
-$storage_root = "/srv/apache/testing/project/files/";
+ $domain_name="testing";
+ $database_name="fileup_testing";
+ $database_username="outsider";
+ $database_password="parola123";
+ $database_location="localhost";
+ /*storage root must be in the webroot*/
+ $storage_root = "/srv/apache/testing/project/files/";
}
/*if we save deleted files just in case of an error*/
diff --git a/php/database.php b/php/database.php
index c7851c5..b95b2a6 100644
--- a/php/database.php
+++ b/php/database.php
@@ -84,15 +84,15 @@ require_once "node.php";
where name=:name"
);
$statement->bindParam(':name',$name);
- if($statement->execute()==NULL)
+ if($statement->execute()==false)
{
error_log("there was a problem with the sql statement at get_nodes_with_name");
- return [];
+ return NULL;
}
return $statement->fetchAll(PDO::FETCH_ASSOC);
}
- /*returns assoc array*/
+ /*returns id*/
function get_node_with_code($code)
{
$statement=$this->pdo->prepare(
@@ -101,12 +101,13 @@ require_once "node.php";
where code=:code"
);
$statement->bindParam(':code',$code);
- if($statement->execute()==NULL)
+ if($statement->execute()==false)
{
error_log("there was a problem with the sql statement at get_nodes_with_code");
- return [];
+ return NULL;
}
- return $statement->fetch(PDO::FETCH_ASSOC);
+ $ret= $statement->fetch(PDO::FETCH_ASSOC);
+ return $ret["id"];
}
/* I think this only makes sense if node is a dir*/
/* returns assoc array of nodes*/
@@ -347,7 +348,7 @@ require_once "node.php";
/*give premissions*/
$id=$this->get_node_with_code($code_name);
- if(count($id)!=1)
+ if($id!=NULL)
{
error_log("created a dangling directory but couldn't find it afterward. Fatal error!");
exit(1);
@@ -451,6 +452,40 @@ require_once "node.php";
}
}
+ function create_shared_node(string $password,int $node_id):bool
+ {
+ $prep=$this->pdo->prepare("insert into shared_nodes(node_id,passcode)
+ values (:id,:pass)
+ ");
+ $prep->bindParam(':id',$node_id);
+ $prep->bindParam(':pass',$password);
+ if($prep->execute()==false)
+ {
+ error_log("could not create shared node in create_shared_node");
+ return false;
+ }
+ return true;
+ }
+ function get_node(int $node_id)
+ {
+ $prep=$this->pdo->prepare("select * from nodes where node_id=:id");
+ $prep->bindParam(':id',$node_id);
+ if($prep->execute()==false)
+ {
+ error_log("sql statement at get_node failed");
+ return NULL;
+ }
+ $nod=$prep->fetch(PDO::FETCH_ASSOC);
+ $ret=new Node();
+ $ret->node_id=$nod["node_id"];
+ $ret->is_directory=$nod["is_directory"];
+ $ret->relative_path=$nod["relative_path"];
+ $ret->type=$nod["type"];
+ $ret->code=$nod["code"];
+
+ return $ret;
+
+ }
/*returns the file name as it must be in the filesystem relative to the storage root*/
function create_file_node(string $filename,string $note,int $dir_id,string $mimetype,User $user): string
{
@@ -470,9 +505,9 @@ require_once "node.php";
{
error_log("could not exedude dir sql statement in create_file_node");
return "error";
- }
+ }
- $dir=$dir_prep->fetch(PDO::FETCH_ASSOC);
+ $dir=$dir_prep->fetch(PDO::FETCH_ASSOC);
if($dir == false)
{
error_log("create_file_node dir isnt a directory");
@@ -514,7 +549,7 @@ require_once "node.php";
/*not so quiet error*/
return "error";
}
- $new_id=$this->get_node_with_code($code)["id"];
+ $new_id=$this->get_node_with_code($code);
/*link the node to the directory*/
$this->link_nodes($dir_id,$new_id,$filename,$note);
/*give premissions to the creator*/
diff --git a/php/node.php b/php/node.php
index 1336a5f..383cc97 100644
--- a/php/node.php
+++ b/php/node.php
@@ -2,7 +2,16 @@
require_once "database.php";
require_once "user.php";
+ class Node
+ {
+ public $node_id;
+ public $is_directory;
+ public $relative_path;
+ public $type;
+ public $code;
+ }
/*path is in terms of the simulated filesystem*/
+ /*returns NULL on error*/
function get_directory(string $abstract_path,User $user)
{
@@ -61,5 +70,39 @@ require_once "user.php";
$parent_dir_id=get_directory($abstract_path,$user);
$database->unlink_nodes($parent_dir_id,$filename);
}
+ function create_share_link(string $abstract_path,string $filename,string $password,User $user,bool $can_read,bool $can_write)
+ {
+ global $database;
+ global $domain_name;
+ global $use_https;
+
+ $dir_id=get_directory($abstract_path,$user);
+ if($dir_id==NULL)
+ {
+ return NULL;
+ }
+ $node_id=get_node_id($filename,$dir_id);
+ if($node_id==NULL)
+ {
+ return NULL;
+ }
+ if($database->create_shared_node($password,$node_id)==false)
+ {
+ return NULL;
+ }
+
+ $code=$database->get_code_of_node($node_id);
+ if($code==NULL)
+ {
+ return NULL;
+ }
+ if($use_https)
+ {
+ return "https://".$domain_name."/share?file=".$code;
+ }else
+ {
+ return "http://".$domain_name."/share?file=".$code;
+ }
+ }
?>
diff --git a/php/readfile.php b/php/readfile.php
index 459232e..9c30ee5 100644
--- a/php/readfile.php
+++ b/php/readfile.php
@@ -40,5 +40,4 @@ if (!$file_node) {
}
header("Content-type: $file_node[mimetype]");
-
readfile("$storage_root/$file_node[code]");
diff --git a/php/share.php b/php/share.php
new file mode 100644
index 0000000..3122162
--- /dev/null
+++ b/php/share.php
@@ -0,0 +1,76 @@
+<?php
+require_once "configuration.php";
+require_once "database.php";
+require_once "user.php";
+session_start();
+
+$user=$_SESSION['user_object'];
+
+
+if($_SERVER["REQUEST_METHOD"] == "POST")
+{
+ $path=$_POST["folder"];
+ /*this could be a directory as well*/
+ $filename=$_POST["filename"];
+ $users=$_POST["users"];
+ $password=$_POST["password"];
+ $premissions=$_POST["premissions"];
+
+ if($premissions==1)
+ {
+ $can_read=true;
+ $can_write=false;
+ }else if($premissions==3)
+ {
+ $can_read=true;
+ $can_write=true;
+ }
+ else
+ {
+ http_response_code(409);
+ error_log("someone gave wrong premmissions =".$premissions."! This could be an attack");
+ exit(1);
+ }
+
+ $share_link=create_share_link($path,$filename,$password,$user,$can_read,$can_write);
+
+ if($share_link==NULL)
+ {
+ http_response_code(409);
+ }
+ echo $share_link;
+ http_response_code(200);
+ exit(0);
+}else if($_SERVER["REQUEST_METHOD"]== "GET")
+{
+ $code=$_GET["code"];
+ $file_id=$database->get_node_with_code($code);
+ if($file_id==NULL)
+ {
+ http_response_code(409);
+ exit(0);
+ }
+ $premissions=$database->get_premissions($file_id,$user->user_id);
+ if($premissions["can_view"]==true)
+ {
+ $node=$database->get_node($file_id);
+ if($node->is_directory)
+ {
+ /*spooky stuff here*/
+ http_response_code(409);
+ exit(1);
+ }else
+ {
+ header("Content-type: $node[type]");
+ readfile("$storage_root/$node[code]");
+ }
+ }
+
+
+
+}else
+{
+ http_response_code(409);
+ exit(0);
+}
+?>
diff --git a/sql/fileshare.sql b/sql/fileshare.sql
index 238d7b4..2c6d09b 100644
--- a/sql/fileshare.sql
+++ b/sql/fileshare.sql
@@ -56,6 +56,13 @@ create table node_links (
foreign key (node_id) references nodes(node_id) on delete cascade
);
+/*we store passwords for the shared links here, it doesn't really have anything to do with the filesystem*/
+create table shared_nodes (
+ node_id int not null,
+ passcode varchar(100) default "",
+ foreign key (node_id) references nodes(node_id) on delete cascade
+);
+
create table trash (
node_id int not null
);