actions_linkedfiles.inc.php

<?php
/* Copyright (C) 2013       Cédric Salvador         <csalvador@gpcsolutions.fr>
 * Copyright (C) 2015       Marcos García           <marcosgdf@gmail.com>
 * Copyright (C) 2015       Ferran Marcet           <fmarcet@2byte.es>
 * Copyright (C) 2024-2026  Frédéric France     <frederic.france@free.fr>
 * Copyright (C) 2024   MDW           <mdeweerd@users.noreply.github.com>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program. If not, see <https://www.gnu.org/licenses/>.
 * or see https://www.gnu.org/
 */
 
'
@phan-var-force CommonObject $object
@phan-var-force string $upload_dir
@phan-var-force string $upload_dirold
@phan-var-force string $confirm
@phan-var-force string $forceFullTextIndexation
';
 
// Protection to understand what happen when submitting files larger than post_max_size
if (GETPOSTINT('uploadform') && empty($_POST) && empty($_FILES)) {
  dol_syslog("The PHP parameter 'post_max_size' is too low. All POST parameters and FILES were set to empty.");
  $langs->loadLangs(array("errors", "install"));
  print $langs->trans("ErrorFileSizeTooLarge").' ';
  print $langs->trans("ErrorGoBackAndCorrectParameters");
  die;
}
 
if ((GETPOST('sendit', 'alpha')
  || GETPOST('linkit', 'restricthtml')
  || ($action == 'confirm_deletefile' && $confirm == 'yes')
  || ($action == 'confirm_updateline' && GETPOST('save', 'alpha') && GETPOST('link', 'alpha'))
  || ($action == 'renamefile' && GETPOST('renamefilesave', 'alpha'))) && empty($permissiontoadd)) {
  dol_syslog('The file actions_linkedfiles.inc.php was included but parameter $permissiontoadd was not set before or is set to false.');
  print 'The file actions_linkedfiles.inc.php was included but parameter $permissiontoadd was not set before or is set to false.';
  die;
}
 
$error = 0;
 
// Submit file/link
if (GETPOST('sendit', 'alpha') && getDolGlobalString('MAIN_UPLOAD_DOC') && !empty($permissiontoadd)) {
  if (!empty($_FILES) && is_array($_FILES['userfile'])) {
    include_once DOL_DOCUMENT_ROOT.'/core/lib/files.lib.php';
 
    if (is_array($_FILES['userfile']['tmp_name'])) {  // When form has a input type="file" field with name="userfile[]"
      $userfiles = $_FILES['userfile']['tmp_name'];
      $filearrayis = 'array';
    } else {
      $userfiles = array(0 => $_FILES['userfile']['tmp_name']);
      $filearrayis = 'string';
    }
 
    foreach ($userfiles as $key => $userfile) {
      if ($filearrayis == 'array') {
        $fileerror = $_FILES['userfile']['error'][$key];
        $fileoriginname = $_FILES['userfile']['name'][$key];
      } else {
        $fileerror = $_FILES['userfile']['error'];
        $fileoriginname = $_FILES['userfile']['name'];
      }
 
      if (empty($userfile)) {
        $error++;
        if ($fileerror == 1 || $fileerror == 2) {
          setEventMessages($langs->trans('ErrorFileSizeTooLarge'), null, 'errors');
        } else {
          setEventMessages($langs->trans("ErrorFieldRequired", $langs->transnoentitiesnoconv("File")), null, 'errors');
        }
      }
      if (preg_match('/__.*__/', $fileoriginname)) {
        $error++;
        setEventMessages($langs->trans('ErrorWrongFileName'), null, 'errors');
      }
    }
 
    if (!$error) {
      // Define if we have to generate thumbs or not
      $generatethumbs = 1;
      if (GETPOST('section_dir', 'alpha')) {
        $generatethumbs = 0;
      }
      $allowoverwrite = (GETPOSTINT('overwritefile') ? 1 : 0);
      $forceFullTextIndexation = (!empty($forceFullTextIndexation) ? $forceFullTextIndexation : '');
 
      if (!empty($upload_dirold) && getDolGlobalInt('PRODUCT_USE_OLD_PATH_FOR_PHOTO')) {
        $result = dol_add_file_process($upload_dirold, $allowoverwrite, 1, 'userfile', GETPOST('savingdocmask', 'alpha'), null, '', $generatethumbs, $object, empty($forceFullTextIndexation) ? 0 : $forceFullTextIndexation);
      } elseif (!empty($upload_dir)) {
        $result = dol_add_file_process($upload_dir, $allowoverwrite, 1, 'userfile', GETPOST('savingdocmask', 'alpha'), null, '', $generatethumbs, $object, empty($forceFullTextIndexation) ? 0 : $forceFullTextIndexation);
      }
    }
  }
} elseif (GETPOST('linkit', 'restricthtml') && getDolGlobalString('MAIN_UPLOAD_DOC') && !empty($permissiontoadd)) {
  $link = GETPOST('link', 'alpha');
  if ($link) {
    if (substr($link, 0, 7) != 'http://'
      && substr($link, 0, 8) != 'https://'
      && substr($link, 0, 7) != 'davs://'
      && (substr($link, 0, 7) != 'file://' || !getDolGlobalString('MAIN_ALLOW_LINK_STARTING_WITH_FILE'))) {
      $link = 'http://'.$link;
    }
 
    // Parse $newUrl
    $newUrlArray = parse_url($link);
 
    // Allow external links to svg ?
    if (!getDolGlobalString('MAIN_ALLOW_SVG_FILES_AS_EXTERNAL_LINKS')) {
      if (!empty($newUrlArray['path']) && preg_match('/\.svg$/i', $newUrlArray['path'])) {
        $error++;
        $langs->load("errors");
        setEventMessages($langs->trans('ErrorSVGFilesNotAllowedAsLinksWithout', 'MAIN_ALLOW_SVG_FILES_AS_EXTERNAL_LINKS'), null, 'errors');
      }
    }
    // Check URL is external (must refuse local link by default)
    if (!getDolGlobalString('MAIN_ALLOW_LOCAL_LINKS_AS_EXTERNAL_LINKS')) {
      // Test $newUrlAray['host'] to check link is external using isIPAllowed() and if not refuse the local link
      // TODO
    }
 
    if (!$error) {
      dol_add_file_process($upload_dir, 0, 1, 'userfile', '', $link, '', 0);
    }
  }
}
 
// Delete file/link
if ($action == 'confirm_deletefile' && $confirm == 'yes' && !empty($permissiontoadd)) {
  $urlfile = GETPOST('urlfile', 'alpha', 0, null, null, 1);
  if (GETPOST('section', 'alpha')) {
    // For a delete from the ECM module, upload_dir is ECM root dir and urlfile contains relative path from upload_dir
    $file = $upload_dir.(preg_match('/\/$/', $upload_dir) ? '' : '/').$urlfile;
  } else { // For a delete from the file manager into another module, or from documents pages, upload_dir contains already path to file from module dir, so we clean path into urlfile.
    $urlfile = basename($urlfile);
    $file = $upload_dir.(preg_match('/\/$/', $upload_dir) ? '' : '/').$urlfile;
    if (!empty($upload_dirold)) {
      $fileold = $upload_dirold."/".$urlfile;
    }
  }
  $linkid = GETPOSTINT('linkid');
  if ($urlfile) {
    // delete of a file
    $dir = dirname($file).'/'; // Path to the folder containing the original image
    $dirthumb = $dir.'/thumbs/'; // Path to the folder containing the thumbnail (if file is an image)
 
    $ret = dol_delete_file($file, 1, 0, 0, (is_object($object) ? $object : null));
    if (!empty($fileold)) {
      dol_delete_file($fileold, 1, 0, 0, (is_object($object) ? $object : null)); // Delete file using old path
    }
 
    if ($ret) {
      // If it exists, remove thumb.
      $regs = array();
      if (preg_match('/(\.jpg|\.jpeg|\.bmp|\.gif|\.png|\.tiff|\.webp|\.xpm|\.xbm|\.avif)$/i', $file, $regs)) {
        $photo_vignette = basename(preg_replace('/'.$regs[0].'/i', '', $file).'_small'.$regs[0]);
        if (file_exists(dol_osencode($dirthumb.$photo_vignette))) {
          dol_delete_file($dirthumb.$photo_vignette);
        }
 
        $photo_vignette = basename(preg_replace('/'.$regs[0].'/i', '', $file).'_mini'.$regs[0]);
        if (file_exists(dol_osencode($dirthumb.$photo_vignette))) {
          dol_delete_file($dirthumb.$photo_vignette);
        }
      }
      setEventMessages($langs->trans("FileWasRemoved", $urlfile), null, 'mesgs');
    } else {
      setEventMessages($langs->trans("ErrorFailToDeleteFile", $urlfile), null, 'errors');
    }
  } elseif ($linkid) {  // delete of external link
    require_once DOL_DOCUMENT_ROOT.'/core/class/link.class.php';
    $link = new Link($db);
    $link->fetch($linkid);
    // Verify the link belongs to the current object to prevent IDOR
    if (!is_object($object) || $link->objecttype != $object->element || $link->objectid != $object->id) {
      accessforbidden();
    }
    $res = $link->delete($user);
 
    $langs->load('link');
    if ($res > 0) {
      setEventMessages($langs->trans("LinkRemoved", $link->label), null, 'mesgs');
    } else {
      if (count($link->errors)) {
        setEventMessages('', $link->errors, 'errors');
      } else {
        setEventMessages($langs->trans("ErrorFailedToDeleteLink", $link->label), null, 'errors');
      }
    }
  }
 
  if (is_object($object) && $object->id > 0) {
    if (!empty($backtopage)) {
      header('Location: '.$backtopage);
      exit;
    } else {
      $tmpurl = $_SERVER["PHP_SELF"].'?id='.$object->id.(GETPOST('section_dir', 'alpha') ? '&section_dir='.urlencode(GETPOST('section_dir', 'alpha')) : '').(!empty($withproject) ? '&withproject=1' : '');
      header('Location: '.$tmpurl);
      exit;
    }
  }
} elseif ($action == 'confirm_updateline' && GETPOST('save', 'alpha') && GETPOST('link', 'alpha') && !empty($permissiontoadd)) {
  require_once DOL_DOCUMENT_ROOT.'/core/class/link.class.php';
 
  $link = new Link($db);
  $f = $link->fetch(GETPOSTINT('linkid'));
 
  if ($f > 0) {
    // Verify the link belongs to the current object to prevent IDOR
    if (!is_object($object) || $link->objecttype != $object->element || $link->objectid != $object->id) {
      accessforbidden();
    }
    $link->url = GETPOST('link', 'alpha');
    if (substr($link->url, 0, 7) != 'http://'
      && substr($link->url, 0, 8) != 'https://'
      && substr($link->url, 0, 7) != 'davs://'
      && (substr($link->url, 0, 7) != 'file://' || !getDolGlobalString('MAIN_ALLOW_LINK_STARTING_WITH_FILE'))) {
      $link->url = 'http://'.$link->url;
    }
    $link->label = GETPOST('label', 'alphanohtml');
 
    $shareenabled = GETPOST('shareenabled', 'alpha');
    if ($shareenabled) {
      require_once DOL_DOCUMENT_ROOT.'/core/lib/security2.lib.php';
      $link->share = getRandomPassword(true);
    } else {
      $link->share = '';
    }
    $res = $link->update($user);
    if ($res <= 0) {
      setEventMessages($langs->trans("ErrorFailedToUpdateLink", $link->label), $link->errors, 'errors');
    }
  } else {
    //error fetching
  }
} elseif ($action == 'renamefile' && GETPOST('renamefilesave', 'alpha') && !empty($permissiontoadd)) {
  // For documents pages, upload_dir contains already the path to the file from module dir
  if (!empty($upload_dir)) {
    $filenamefrom = dol_sanitizeFileName(GETPOST('renamefilefrom', 'alpha'), '_', 0); // Do not remove accents
    $filenameto = dol_sanitizeFileName(GETPOST('renamefileto', 'alpha'), '_', 0); // Do not remove accents
 
    // We apply dol_string_nohtmltag also to clean file names (this remove duplicate spaces) because
    // this function is also applied when we upload and when we make try to download file (by the GETPOST(filename, 'alphanohtml') call).
    $filenameto = dol_string_nohtmltag($filenameto);
    if (preg_match('/__.*__/', $filenameto)) {
      $error++;
      setEventMessages($langs->trans('ErrorWrongFileName'), null, 'errors');
    }
 
    // Check that filename is not the one of a reserved allowed CLI command
    if (empty($error)) {
      global $dolibarr_main_restrict_os_commands;
      if (!empty($dolibarr_main_restrict_os_commands)) {
        $arrayofallowedcommand = explode(',', $dolibarr_main_restrict_os_commands);
        $arrayofallowedcommand = array_map('trim', $arrayofallowedcommand);
        if (in_array(basename($filenameto), $arrayofallowedcommand)) {
          $error++;
          $langs->load("errors"); // key must be loaded because we can't rely on loading during output, we need var substitution to be done now.
          setEventMessages($langs->trans("ErrorFilenameReserved", basename($filenameto)), null, 'errors');
        }
      }
    }
 
    if (empty($error) && $filenamefrom != $filenameto) {
      // For backward compatibility, the file to rename may be stored into an old path (see PRODUCT_USE_OLD_PATH_FOR_PHOTO).
      // Upload and delete actions already fall back on $upload_dirold, so the rename action must do the same.
      $dirforfile = $upload_dir;
      if (!empty($upload_dirold) && !dol_is_file($upload_dir.'/'.$filenamefrom) && dol_is_file($upload_dirold.'/'.$filenamefrom)) {
        $dirforfile = $upload_dirold;
      }
 
      // Security:
      // Disallow file with some extensions. We rename them.
      // Because if we put the documents directory into a directory inside web root (very bad), this allows to execute on demand arbitrary code.
      if (isAFileWithExecutableContent($filenameto) && !getDolGlobalString('MAIN_DOCUMENT_IS_OUTSIDE_WEBROOT_SO_NOEXE_NOT_REQUIRED')) {
        // $dirforfile ends with a slash, so be must be sure the medias dir to compare to ends with slash too.
        $publicmediasdirwithslash = $conf->medias->multidir_output[$conf->entity];
        if (!preg_match('/\/$/', $publicmediasdirwithslash)) {
          $publicmediasdirwithslash .= '/';
        }
 
        if (strpos($dirforfile, $publicmediasdirwithslash) !== 0) { // We never add .noexe on files into media directory
          $filenameto .= '.noexe';
        }
      }
 
      if ($filenamefrom && $filenameto) {
        $srcpath = $dirforfile.'/'.$filenamefrom;
        $destpath = $dirforfile.'/'.$filenameto;
        /* disabled. Too many bugs. All files of an object must remain into directory of object. link with event should be done in llx_ecm_files with column agenda_id.
        if ($modulepart == "ticket" && !dol_is_file($srcpath)) {
          $srcbis = $conf->agenda->dir_output.'/'.GETPOST('section_dir').$filenamefrom;
          if (dol_is_file($srcbis)) {
            $srcpath = $srcbis;
            $destpath = $conf->agenda->dir_output.'/'.GETPOST('section_dir').$filenameto;
          }
        }*/
 
        $reshook = $hookmanager->initHooks(array('actionlinkedfiles'));
        $parameters = array('filenamefrom' => $filenamefrom, 'filenameto' => $filenameto, 'upload_dir' => $dirforfile);
        $reshook = $hookmanager->executeHooks('renameUploadedFile', $parameters, $object);
 
        if (empty($reshook)) {
          if (preg_match('/^\./', $filenameto)) {
            $langs->load("errors"); // lang must be loaded because we can't rely on loading during output, we need var substitution to be done now.
            setEventMessages($langs->trans("ErrorFilenameCantStartWithDot", $filenameto), null, 'errors');
          } elseif (!file_exists($destpath)) {
            $result = dol_move($srcpath, $destpath, '0', 1, 0, 1, [], $object->entity ?? $conf->entity);
            if ($result) {
              // Define if we have to generate thumbs or not
              $generatethumbs = 1;
              // When we rename a file from the file manager in ecm, we must not regenerate thumbs (not a problem, we do pass here)
              // When we rename a file from the website module, we must not regenerate thumbs (module = medias in such a case)
              // but when we rename from a tab "Documents", we must regenerate thumbs
              if (GETPOST('modulepart', 'aZ09') == 'medias') {
                $generatethumbs = 0;
              }
 
              if ($generatethumbs) {
                if ($object->id > 0) {
                  // Create thumbs for the new file
                  $object->addThumbs($destpath);
 
                  // Delete thumb files with old name
                  $object->delThumbs($srcpath);
                }
              }
 
              setEventMessages($langs->trans("FileRenamed"), null);
            } else {
              $langs->load("errors"); // lang must be loaded because we can't rely on loading during output, we need var substitution to be done now.
              setEventMessages($langs->trans("ErrorFailToRenameFile", $filenamefrom, $filenameto), null, 'errors');
            }
          } else {
            $langs->load("errors"); // lang must be loaded because we can't rely on loading during output, we need var substitution to be done now.
            setEventMessages($langs->trans("ErrorDestinationAlreadyExists", $filenameto), null, 'errors');
          }
        }
      }
    }
  }
 
  // Update properties in ECM table
  if (GETPOSTINT('ecmfileid') > 0) {
    $shareenabled = GETPOST('shareenabled', 'alpha');
 
    include_once DOL_DOCUMENT_ROOT.'/ecm/class/ecmfiles.class.php';
    $ecmfile = new EcmFiles($db);
    $result = $ecmfile->fetch(GETPOSTINT('ecmfileid'));
    if ($result > 0) {
      if ($shareenabled) {
        if (empty($ecmfile->share)) {
          require_once DOL_DOCUMENT_ROOT.'/core/lib/security2.lib.php';
          $ecmfile->share = getRandomPassword(true);
        }
      } else {
        $ecmfile->share = '';
      }
      $result = $ecmfile->update($user);
      if ($result < 0) {
        setEventMessages($ecmfile->error, $ecmfile->errors, 'warnings');
      }
    }
  }
}