1 | |
|
2 | |
|
3 | |
|
4 | |
|
5 | |
|
6 | |
|
7 | |
|
8 | |
|
9 | |
|
10 | |
|
11 | |
|
12 | |
|
13 | |
|
14 | |
|
15 | |
|
16 | |
|
17 | |
|
18 | |
|
19 | |
|
20 | |
|
21 | |
package net.fckeditor.connector; |
22 | |
|
23 | |
import java.io.File; |
24 | |
import java.io.IOException; |
25 | |
import java.io.PrintWriter; |
26 | |
import java.util.List; |
27 | |
|
28 | |
import javax.servlet.ServletException; |
29 | |
import javax.servlet.http.HttpServlet; |
30 | |
import javax.servlet.http.HttpServletRequest; |
31 | |
import javax.servlet.http.HttpServletResponse; |
32 | |
|
33 | |
import net.fckeditor.handlers.CommandHandler; |
34 | |
import net.fckeditor.handlers.ConnectorHandler; |
35 | |
import net.fckeditor.handlers.ExtensionsHandler; |
36 | |
import net.fckeditor.handlers.RequestCycleHandler; |
37 | |
import net.fckeditor.handlers.ResourceTypeHandler; |
38 | |
import net.fckeditor.response.UploadResponse; |
39 | |
import net.fckeditor.response.XmlResponse; |
40 | |
import net.fckeditor.tool.Utils; |
41 | |
import net.fckeditor.tool.UtilsFile; |
42 | |
import net.fckeditor.tool.UtilsResponse; |
43 | |
|
44 | |
import org.apache.commons.fileupload.FileItem; |
45 | |
import org.apache.commons.fileupload.FileItemFactory; |
46 | |
import org.apache.commons.fileupload.disk.DiskFileItemFactory; |
47 | |
import org.apache.commons.fileupload.servlet.ServletFileUpload; |
48 | |
import org.apache.commons.io.FilenameUtils; |
49 | |
import org.slf4j.Logger; |
50 | |
import org.slf4j.LoggerFactory; |
51 | |
|
52 | |
|
53 | |
|
54 | |
|
55 | |
|
56 | |
|
57 | |
|
58 | |
|
59 | |
|
60 | |
|
61 | |
|
62 | |
|
63 | |
|
64 | |
|
65 | |
|
66 | 0 | public class ConnectorServlet extends HttpServlet { |
67 | |
|
68 | |
private static final long serialVersionUID = -5742008970929377161L; |
69 | 0 | private static final Logger logger = LoggerFactory.getLogger(ConnectorServlet.class); |
70 | |
|
71 | |
|
72 | |
|
73 | |
|
74 | |
|
75 | |
public void init() throws ServletException, IllegalArgumentException { |
76 | |
|
77 | 0 | String realDefaultUserFilesPath = getServletContext().getRealPath( |
78 | |
ConnectorHandler.getDefaultUserFilesPath()); |
79 | |
|
80 | 0 | File defaultUserFilesDir = new File(realDefaultUserFilesPath); |
81 | 0 | UtilsFile.checkDirAndCreate(defaultUserFilesDir); |
82 | |
|
83 | 0 | logger.info("ConnectorServlet successful initialized!"); |
84 | 0 | } |
85 | |
|
86 | |
|
87 | |
|
88 | |
|
89 | |
|
90 | |
|
91 | |
|
92 | |
|
93 | |
|
94 | |
|
95 | |
public void doGet(HttpServletRequest request, HttpServletResponse response) |
96 | |
throws ServletException, IOException { |
97 | 0 | logger.debug("Entering ConnectorServlet#doGet"); |
98 | |
|
99 | 0 | response.setCharacterEncoding("UTF-8"); |
100 | 0 | response.setContentType("application/xml; charset=UTF-8"); |
101 | 0 | response.setHeader("Cache-Control", "no-cache"); |
102 | 0 | PrintWriter out = response.getWriter(); |
103 | |
|
104 | 0 | String commandStr = request.getParameter("Command"); |
105 | 0 | String typeStr = request.getParameter("Type"); |
106 | 0 | String currentFolderStr = request.getParameter("CurrentFolder"); |
107 | |
|
108 | 0 | logger.debug("Parameter Command: {}", commandStr); |
109 | 0 | logger.debug("Parameter Type: {}", typeStr); |
110 | 0 | logger.debug("Parameter CurrentFolder: {}", currentFolderStr); |
111 | |
|
112 | |
XmlResponse xr; |
113 | |
|
114 | 0 | if (!RequestCycleHandler.isEnabledForFileBrowsing(request)) |
115 | 0 | xr = new XmlResponse(XmlResponse.EN_ERROR, Messages.NOT_AUTHORIZED_FOR_BROWSING); |
116 | 0 | else if (!CommandHandler.isValidForGet(commandStr)) |
117 | 0 | xr = new XmlResponse(XmlResponse.EN_ERROR, Messages.INVALID_COMMAND); |
118 | 0 | else if (typeStr != null && !ResourceTypeHandler.isValid(typeStr)) |
119 | 0 | xr = new XmlResponse(XmlResponse.EN_ERROR, Messages.INVALID_TYPE); |
120 | 0 | else if (!UtilsFile.isValidPath(currentFolderStr)) |
121 | 0 | xr = new XmlResponse(XmlResponse.EN_ERROR, Messages.INVALID_CURRENT_FOLDER); |
122 | |
else { |
123 | 0 | CommandHandler command = CommandHandler.getCommand(commandStr); |
124 | 0 | ResourceTypeHandler resourceType = ResourceTypeHandler.getDefaultResourceType(typeStr); |
125 | |
|
126 | 0 | String typePath = UtilsResponse.constructResponseUrl(request, resourceType, |
127 | |
currentFolderStr, false, false); |
128 | 0 | String typeDirPath = getServletContext().getRealPath(typePath); |
129 | |
|
130 | 0 | File typeDir = new File(typeDirPath); |
131 | 0 | UtilsFile.checkDirAndCreate(typeDir); |
132 | |
|
133 | 0 | File currentDir = new File(typeDir, currentFolderStr); |
134 | |
|
135 | 0 | if (!currentDir.exists()) |
136 | 0 | xr = new XmlResponse(XmlResponse.EN_INVALID_FOLDER_NAME); |
137 | |
else { |
138 | |
|
139 | 0 | xr = new XmlResponse(command, resourceType, currentFolderStr, UtilsResponse |
140 | |
.constructResponseUrl(request, resourceType, currentFolderStr, true, |
141 | |
ConnectorHandler.isFullUrl())); |
142 | |
|
143 | 0 | if (command.equals(CommandHandler.GET_FOLDERS)) |
144 | 0 | xr.setFolders(currentDir); |
145 | 0 | else if (command.equals(CommandHandler.GET_FOLDERS_AND_FILES)) |
146 | 0 | xr.setFoldersAndFiles(currentDir); |
147 | 0 | else if (command.equals(CommandHandler.CREATE_FOLDER)) { |
148 | 0 | String newFolderStr = UtilsFile.sanitizeFolderName(request |
149 | |
.getParameter("NewFolderName")); |
150 | 0 | logger.debug("Parameter NewFolderName: {}", newFolderStr); |
151 | |
|
152 | 0 | File newFolder = new File(currentDir, newFolderStr); |
153 | 0 | int errorNumber = XmlResponse.EN_UKNOWN; |
154 | |
|
155 | 0 | if (newFolder.exists()) |
156 | 0 | errorNumber = XmlResponse.EN_ALREADY_EXISTS; |
157 | |
else { |
158 | |
try { |
159 | 0 | errorNumber = (newFolder.mkdir()) ? XmlResponse.EN_OK |
160 | |
: XmlResponse.EN_INVALID_FOLDER_NAME; |
161 | 0 | } catch (SecurityException e) { |
162 | 0 | errorNumber = XmlResponse.EN_SECURITY_ERROR; |
163 | 0 | } |
164 | |
} |
165 | 0 | xr.setError(errorNumber); |
166 | |
} |
167 | |
} |
168 | |
} |
169 | |
|
170 | 0 | out.print(xr); |
171 | 0 | out.flush(); |
172 | 0 | out.close(); |
173 | 0 | logger.debug("Exiting ConnectorServlet#doGet"); |
174 | 0 | } |
175 | |
|
176 | |
|
177 | |
|
178 | |
|
179 | |
|
180 | |
|
181 | |
|
182 | |
|
183 | |
|
184 | |
|
185 | |
@SuppressWarnings("unchecked") |
186 | |
public void doPost(HttpServletRequest request, HttpServletResponse response) |
187 | |
throws ServletException, IOException { |
188 | 0 | logger.debug("Entering Connector#doPost"); |
189 | |
|
190 | 0 | response.setCharacterEncoding("UTF-8"); |
191 | 0 | response.setContentType("text/html; charset=UTF-8"); |
192 | 0 | response.setHeader("Cache-Control", "no-cache"); |
193 | 0 | PrintWriter out = response.getWriter(); |
194 | |
|
195 | 0 | String commandStr = request.getParameter("Command"); |
196 | 0 | String typeStr = request.getParameter("Type"); |
197 | 0 | String currentFolderStr = request.getParameter("CurrentFolder"); |
198 | |
|
199 | 0 | logger.debug("Parameter Command: {}", commandStr); |
200 | 0 | logger.debug("Parameter Type: {}", typeStr); |
201 | 0 | logger.debug("Parameter CurrentFolder: {}", currentFolderStr); |
202 | |
|
203 | |
UploadResponse ur; |
204 | |
|
205 | |
|
206 | 0 | if (Utils.isEmpty(commandStr) && Utils.isEmpty(currentFolderStr)) { |
207 | 0 | commandStr = "QuickUpload"; |
208 | 0 | currentFolderStr = "/"; |
209 | |
} |
210 | |
|
211 | 0 | if (!RequestCycleHandler.isEnabledForFileUpload(request)) |
212 | 0 | ur = new UploadResponse(UploadResponse.EN_SECURITY_ERROR, null, null, |
213 | |
Messages.NOT_AUTHORIZED_FOR_UPLOAD); |
214 | 0 | else if (!CommandHandler.isValidForPost(commandStr)) |
215 | 0 | ur = new UploadResponse(UploadResponse.EN_ERROR, null, null, Messages.INVALID_COMMAND); |
216 | 0 | else if (typeStr != null && !ResourceTypeHandler.isValid(typeStr)) |
217 | 0 | ur = new UploadResponse(UploadResponse.EN_ERROR, null, null, Messages.INVALID_TYPE); |
218 | 0 | else if (!UtilsFile.isValidPath(currentFolderStr)) |
219 | 0 | ur = UploadResponse.UR_INVALID_CURRENT_FOLDER; |
220 | |
else { |
221 | 0 | ResourceTypeHandler resourceType = ResourceTypeHandler.getDefaultResourceType(typeStr); |
222 | |
|
223 | 0 | String typePath = UtilsResponse.constructResponseUrl(request, resourceType, |
224 | |
currentFolderStr, false, false); |
225 | 0 | String typeDirPath = getServletContext().getRealPath(typePath); |
226 | |
|
227 | 0 | File typeDir = new File(typeDirPath); |
228 | 0 | UtilsFile.checkDirAndCreate(typeDir); |
229 | |
|
230 | 0 | File currentDir = new File(typeDir, currentFolderStr); |
231 | |
|
232 | 0 | if (!currentDir.exists()) |
233 | 0 | ur = UploadResponse.UR_INVALID_CURRENT_FOLDER; |
234 | |
else { |
235 | |
|
236 | 0 | String newFilename = null; |
237 | 0 | FileItemFactory factory = new DiskFileItemFactory(); |
238 | 0 | ServletFileUpload upload = new ServletFileUpload(factory); |
239 | |
|
240 | |
try { |
241 | |
|
242 | 0 | List<FileItem> items = upload.parseRequest(request); |
243 | |
|
244 | |
|
245 | 0 | FileItem uplFile = items.get(0); |
246 | 0 | String rawName = UtilsFile.sanitizeFileName(uplFile.getName()); |
247 | 0 | String filename = FilenameUtils.getName(rawName); |
248 | 0 | String baseName = FilenameUtils.removeExtension(filename); |
249 | 0 | String extension = FilenameUtils.getExtension(filename); |
250 | |
|
251 | 0 | if (!ExtensionsHandler.isAllowed(resourceType, extension)) |
252 | 0 | ur = new UploadResponse(UploadResponse.EN_INVALID_EXTENSION); |
253 | |
else { |
254 | |
|
255 | |
|
256 | 0 | File pathToSave = new File(currentDir, filename); |
257 | 0 | int counter = 1; |
258 | 0 | while (pathToSave.exists()) { |
259 | 0 | newFilename = baseName.concat("(").concat(String.valueOf(counter)) |
260 | |
.concat(")").concat(".").concat(extension); |
261 | 0 | pathToSave = new File(currentDir, newFilename); |
262 | 0 | counter++; |
263 | |
} |
264 | |
|
265 | 0 | if (Utils.isEmpty(newFilename)) |
266 | 0 | ur = new UploadResponse(UploadResponse.EN_OK, UtilsResponse |
267 | |
.constructResponseUrl(request, resourceType, currentFolderStr, |
268 | |
true, ConnectorHandler.isFullUrl()).concat(filename)); |
269 | |
else |
270 | 0 | ur = new UploadResponse(UploadResponse.EN_RENAMED, |
271 | |
UtilsResponse.constructResponseUrl(request, resourceType, |
272 | |
currentFolderStr, true, ConnectorHandler.isFullUrl()) |
273 | |
.concat(newFilename), newFilename); |
274 | |
|
275 | |
|
276 | 0 | if (resourceType.equals(ResourceTypeHandler.IMAGE) |
277 | |
&& ConnectorHandler.isSecureImageUploads()) { |
278 | 0 | if (UtilsFile.isImage(uplFile.getInputStream())) |
279 | 0 | uplFile.write(pathToSave); |
280 | |
else { |
281 | 0 | uplFile.delete(); |
282 | 0 | ur = new UploadResponse(UploadResponse.EN_INVALID_EXTENSION); |
283 | |
} |
284 | |
} else |
285 | 0 | uplFile.write(pathToSave); |
286 | |
|
287 | |
} |
288 | 0 | } catch (Exception e) { |
289 | 0 | ur = new UploadResponse(UploadResponse.EN_SECURITY_ERROR); |
290 | 0 | } |
291 | |
} |
292 | |
|
293 | |
} |
294 | |
|
295 | 0 | out.print(ur); |
296 | 0 | out.flush(); |
297 | 0 | out.close(); |
298 | |
|
299 | 0 | logger.debug("Exiting Connector#doPost"); |
300 | 0 | } |
301 | |
|
302 | |
} |