Mercurial > prosody-modules

annotate mod_http_upload_external/share.php @ 4381:a1256e376dca

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
mod_invites_register_api: reroute register call The token from the URI was not used anyway. In addition, we now return the resulting JID because it’s the only way to be sure.
author Jonas Schäfer <jonas@wielicki.name>
date Mon, 25 Jan 2021 16:55:39 +0100
parents b0ad1604f77e
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
2333
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
1 <?php
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
2
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
3 /*
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
4 PHP script to handle file uploads and downloads for Prosody's mod_http_upload_external
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
5
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
6 Tested with Apache 2.2+ and PHP 5.3+
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
7
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
8 ** Why this script?
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
9
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
10 This script only allows uploads that have been authorized by mod_http_upload_external. It
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
11 attempts to make the upload/download as safe as possible, considering that there are *many*
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
12 security concerns involved with allowing arbitrary file upload/download on a web server.
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
13
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
14 With that said, I do not consider myself a PHP developer, and at the time of writing, this
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
15 code has had no external review. Use it at your own risk. I make no claims that this code
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
16 is secure.
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
17
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
18 ** How to use?
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
19
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
20 Drop this file somewhere it will be served by your web server. Edit the config options below.
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
21
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
22 In Prosody set:
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
23
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
24 http_upload_external_base_url = "https://your.example.com/path/to/share.php/"
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
25 http_upload_external_secret = "this is your secret string"
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
26
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
27 ** License
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
28
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
29 (C) 2016 Matthew Wild <mwild1@gmail.com>
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
30
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
31 Permission is hereby granted, free of charge, to any person obtaining a copy of this software
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
32 and associated documentation files (the "Software"), to deal in the Software without restriction,
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
33 including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense,
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
34 and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so,
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
35 subject to the following conditions:
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
36
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
37 The above copyright notice and this permission notice shall be included in all copies or substantial
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
38 portions of the Software.
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
39
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
40 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
41 BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
42 NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM,
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
43 DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
44 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
45
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
46 */
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
47
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
48 /*\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\*/
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
49 /* CONFIGURATION OPTIONS */
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
50 /*\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\*/
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
51
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
52 /* Change this to a directory that is writable by your web server, but is outside your web root */
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
53 $CONFIG_STORE_DIR = '/tmp';
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
54
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
55 /* This must be the same as 'http_upload_external_secret' that you set in Prosody's config file */
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
56 $CONFIG_SECRET = 'this is your secret string';
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
57
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
58 /* For people who need options to tweak that they don't understand... here you are */
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
59 $CONFIG_CHUNK_SIZE = 4096;
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
60
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
61 /*\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\*/
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
62 /* END OF CONFIGURATION */
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
63 /*\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\*/
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
64
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
65 /* Do not edit below this line unless you know what you are doing (spoiler: nobody does) */
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
66
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
67 $upload_file_name = substr($_SERVER['PHP_SELF'], strlen($_SERVER['SCRIPT_NAME'])+1);
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
68 $store_file_name = $CONFIG_STORE_DIR . '/store-' . hash('sha256', $upload_file_name);
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
69
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
70 $request_method = $_SERVER['REQUEST_METHOD'];
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
71
3226
3b13f19652e2 mod_http_upload_external: Update share.php and share_v2.php to allow cross-domain requests
Matthew Wild <mwild1@gmail.com>
parents: 3216
diff changeset
72 /* Set CORS headers */
3b13f19652e2 mod_http_upload_external: Update share.php and share_v2.php to allow cross-domain requests
Matthew Wild <mwild1@gmail.com>
parents: 3216
diff changeset
73 header('Access-Control-Allow-Methods: GET, PUT, OPTIONS');
3b13f19652e2 mod_http_upload_external: Update share.php and share_v2.php to allow cross-domain requests
Matthew Wild <mwild1@gmail.com>
parents: 3216
diff changeset
74 header('Access-Control-Allow-Headers: Content-Type');
3b13f19652e2 mod_http_upload_external: Update share.php and share_v2.php to allow cross-domain requests
Matthew Wild <mwild1@gmail.com>
parents: 3216
diff changeset
75 header('Access-Control-Max-Age: 7200');
3b13f19652e2 mod_http_upload_external: Update share.php and share_v2.php to allow cross-domain requests
Matthew Wild <mwild1@gmail.com>
parents: 3216
diff changeset
76 header('Access-Control-Allow-Origin: *');
3b13f19652e2 mod_http_upload_external: Update share.php and share_v2.php to allow cross-domain requests
Matthew Wild <mwild1@gmail.com>
parents: 3216
diff changeset
77
2333
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
78 if(array_key_exists('v', $_GET) === TRUE && $request_method === 'PUT') {
2979
9480ca61294d mod_http_upload_external: Fix syntax error in share.php
Matthew Wild <mwild1@gmail.com>
parents: 2977
diff changeset
79 $upload_file_size = $_SERVER['CONTENT_LENGTH'];
2333
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
80 $upload_token = $_GET['v'];
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
81
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
82 $calculated_token = hash_hmac('sha256', "$upload_file_name $upload_file_size", $CONFIG_SECRET);
3216
5d35e6b409e0 mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents: 2979
diff changeset
83 if(function_exists('hash_equals')) {
5d35e6b409e0 mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents: 2979
diff changeset
84 if(hash_equals($calculated_token, $upload_token) !== TRUE) {
5d35e6b409e0 mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents: 2979
diff changeset
85 error_log("Token mismatch: calculated $calculated_token got $upload_token");
5d35e6b409e0 mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents: 2979
diff changeset
86 header('HTTP/1.0 403 Forbidden');
5d35e6b409e0 mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents: 2979
diff changeset
87 exit;
5d35e6b409e0 mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents: 2979
diff changeset
88 }
2333
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
89 }
3216
5d35e6b409e0 mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents: 2979
diff changeset
90 else {
5d35e6b409e0 mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents: 2979
diff changeset
91 if($upload_token !== $calculated_token) {
5d35e6b409e0 mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents: 2979
diff changeset
92 error_log("Token mismatch: calculated $calculated_token got $upload_token");
5d35e6b409e0 mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents: 2979
diff changeset
93 header('HTTP/1.0 403 Forbidden');
5d35e6b409e0 mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents: 2979
diff changeset
94 exit;
5d35e6b409e0 mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents: 2979
diff changeset
95 }
5d35e6b409e0 mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents: 2979
diff changeset
96 }
2333
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
97 /* Open a file for writing */
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
98 $store_file = fopen($store_file_name, 'x');
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
99
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
100 if($store_file === FALSE) {
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
101 header('HTTP/1.0 409 Conflict');
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
102 exit;
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
103 }
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
104
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
105 /* PUT data comes in on the stdin stream */
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
106 $incoming_data = fopen('php://input', 'r');
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
107
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
108 /* Read the data a chunk at a time and write to the file */
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
109 while ($data = fread($incoming_data, $CONFIG_CHUNK_SIZE)) {
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
110 fwrite($store_file, $data);
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
111 }
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
112
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
113 /* Close the streams */
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
114 fclose($incoming_data);
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
115 fclose($store_file);
4310
b0ad1604f77e mod_http_upload_external: update php scripts to return HTTP 201 Created on upload
Richard Schwab <hgprosodyim-lawrpxz9uw@central-intelligence.agency>
parents: 3227
diff changeset
116
b0ad1604f77e mod_http_upload_external: update php scripts to return HTTP 201 Created on upload
Richard Schwab <hgprosodyim-lawrpxz9uw@central-intelligence.agency>
parents: 3227
diff changeset
117 // https://xmpp.org/extensions/xep-0363.html#upload
b0ad1604f77e mod_http_upload_external: update php scripts to return HTTP 201 Created on upload
Richard Schwab <hgprosodyim-lawrpxz9uw@central-intelligence.agency>
parents: 3227
diff changeset
118 // A HTTP status Code of 201 means that the server is now ready to serve the file via the provided GET URL.
b0ad1604f77e mod_http_upload_external: update php scripts to return HTTP 201 Created on upload
Richard Schwab <hgprosodyim-lawrpxz9uw@central-intelligence.agency>
parents: 3227
diff changeset
119 header('HTTP/1.0 201 Created');
b0ad1604f77e mod_http_upload_external: update php scripts to return HTTP 201 Created on upload
Richard Schwab <hgprosodyim-lawrpxz9uw@central-intelligence.agency>
parents: 3227
diff changeset
120 exit;
2333
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
121 } else if($request_method === 'GET' || $request_method === 'HEAD') {
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
122 // Send file (using X-Sendfile would be nice here...)
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
123 if(file_exists($store_file_name)) {
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
124 header('Content-Disposition: attachment');
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
125 header('Content-Type: application/octet-stream');
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
126 header('Content-Length: '.filesize($store_file_name));
3227
62c82d097017 mod_http_upload_external: share.php: Fix whitespace
Matthew Wild <mwild1@gmail.com>
parents: 3226
diff changeset
127 header("Content-Security-Policy: \"default-src 'none'\"");
62c82d097017 mod_http_upload_external: share.php: Fix whitespace
Matthew Wild <mwild1@gmail.com>
parents: 3226
diff changeset
128 header("X-Content-Security-Policy: \"default-src 'none'\"");
62c82d097017 mod_http_upload_external: share.php: Fix whitespace
Matthew Wild <mwild1@gmail.com>
parents: 3226
diff changeset
129 header("X-WebKit-CSP: \"default-src 'none'\"");
2333
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
130 if($request_method !== 'HEAD') {
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
131 readfile($store_file_name);
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
132 }
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
133 } else {
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
134 header('HTTP/1.0 404 Not Found');
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
135 }
3226
3b13f19652e2 mod_http_upload_external: Update share.php and share_v2.php to allow cross-domain requests
Matthew Wild <mwild1@gmail.com>
parents: 3216
diff changeset
136 } else if($request_method === 'OPTIONS') {
2333
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
137 } else {
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
138 header('HTTP/1.0 400 Bad Request');
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
139 }
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
140
f86478a02b25 mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
141 exit;