Mercurial > prosody-modules
annotate mod_http_upload_external/share.php @ 4260:c539334dd01a
mod_http_oauth2: Rescope oauth client config into users' storage
This produces client_id of the form owner@host/random and prevents
clients from being deleted by registering an account with the same name
and then deleting the account, as well as having the client
automatically be deleted when the owner account is removed.
On one hand, this leaks the bare JID of the creator to users. On the
other hand, it makes it obvious who made the oauth application.
This module is experimental and only for developers, so this can be
changed if a better method comes up.
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Sat, 21 Nov 2020 23:55:10 +0100 |
parents | 62c82d097017 |
children | b0ad1604f77e |
rev | line source |
---|---|
2333
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
1 <?php |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
2 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
3 /* |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
4 PHP script to handle file uploads and downloads for Prosody's mod_http_upload_external |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
5 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
6 Tested with Apache 2.2+ and PHP 5.3+ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
7 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
8 ** Why this script? |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
9 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
10 This script only allows uploads that have been authorized by mod_http_upload_external. It |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
11 attempts to make the upload/download as safe as possible, considering that there are *many* |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
12 security concerns involved with allowing arbitrary file upload/download on a web server. |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
13 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
14 With that said, I do not consider myself a PHP developer, and at the time of writing, this |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
15 code has had no external review. Use it at your own risk. I make no claims that this code |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
16 is secure. |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
17 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
18 ** How to use? |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
19 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
20 Drop this file somewhere it will be served by your web server. Edit the config options below. |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
21 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
22 In Prosody set: |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
23 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
24 http_upload_external_base_url = "https://your.example.com/path/to/share.php/" |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
25 http_upload_external_secret = "this is your secret string" |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
26 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
27 ** License |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
28 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
29 (C) 2016 Matthew Wild <mwild1@gmail.com> |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
30 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
31 Permission is hereby granted, free of charge, to any person obtaining a copy of this software |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
32 and associated documentation files (the "Software"), to deal in the Software without restriction, |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
33 including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
34 and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
35 subject to the following conditions: |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
36 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
37 The above copyright notice and this permission notice shall be included in all copies or substantial |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
38 portions of the Software. |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
39 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
40 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
41 BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
42 NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
43 DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
44 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
45 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
46 */ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
47 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
48 /*\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\*/ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
49 /* CONFIGURATION OPTIONS */ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
50 /*\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\*/ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
51 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
52 /* Change this to a directory that is writable by your web server, but is outside your web root */ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
53 $CONFIG_STORE_DIR = '/tmp'; |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
54 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
55 /* This must be the same as 'http_upload_external_secret' that you set in Prosody's config file */ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
56 $CONFIG_SECRET = 'this is your secret string'; |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
57 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
58 /* For people who need options to tweak that they don't understand... here you are */ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
59 $CONFIG_CHUNK_SIZE = 4096; |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
60 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
61 /*\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\*/ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
62 /* END OF CONFIGURATION */ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
63 /*\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\*/ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
64 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
65 /* Do not edit below this line unless you know what you are doing (spoiler: nobody does) */ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
66 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
67 $upload_file_name = substr($_SERVER['PHP_SELF'], strlen($_SERVER['SCRIPT_NAME'])+1); |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
68 $store_file_name = $CONFIG_STORE_DIR . '/store-' . hash('sha256', $upload_file_name); |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
69 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
70 $request_method = $_SERVER['REQUEST_METHOD']; |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
71 |
3226
3b13f19652e2
mod_http_upload_external: Update share.php and share_v2.php to allow cross-domain requests
Matthew Wild <mwild1@gmail.com>
parents:
3216
diff
changeset
|
72 /* Set CORS headers */ |
3b13f19652e2
mod_http_upload_external: Update share.php and share_v2.php to allow cross-domain requests
Matthew Wild <mwild1@gmail.com>
parents:
3216
diff
changeset
|
73 header('Access-Control-Allow-Methods: GET, PUT, OPTIONS'); |
3b13f19652e2
mod_http_upload_external: Update share.php and share_v2.php to allow cross-domain requests
Matthew Wild <mwild1@gmail.com>
parents:
3216
diff
changeset
|
74 header('Access-Control-Allow-Headers: Content-Type'); |
3b13f19652e2
mod_http_upload_external: Update share.php and share_v2.php to allow cross-domain requests
Matthew Wild <mwild1@gmail.com>
parents:
3216
diff
changeset
|
75 header('Access-Control-Max-Age: 7200'); |
3b13f19652e2
mod_http_upload_external: Update share.php and share_v2.php to allow cross-domain requests
Matthew Wild <mwild1@gmail.com>
parents:
3216
diff
changeset
|
76 header('Access-Control-Allow-Origin: *'); |
3b13f19652e2
mod_http_upload_external: Update share.php and share_v2.php to allow cross-domain requests
Matthew Wild <mwild1@gmail.com>
parents:
3216
diff
changeset
|
77 |
2333
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
78 if(array_key_exists('v', $_GET) === TRUE && $request_method === 'PUT') { |
2979
9480ca61294d
mod_http_upload_external: Fix syntax error in share.php
Matthew Wild <mwild1@gmail.com>
parents:
2977
diff
changeset
|
79 $upload_file_size = $_SERVER['CONTENT_LENGTH']; |
2333
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
80 $upload_token = $_GET['v']; |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
81 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
82 $calculated_token = hash_hmac('sha256', "$upload_file_name $upload_file_size", $CONFIG_SECRET); |
3216
5d35e6b409e0
mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents:
2979
diff
changeset
|
83 if(function_exists('hash_equals')) { |
5d35e6b409e0
mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents:
2979
diff
changeset
|
84 if(hash_equals($calculated_token, $upload_token) !== TRUE) { |
5d35e6b409e0
mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents:
2979
diff
changeset
|
85 error_log("Token mismatch: calculated $calculated_token got $upload_token"); |
5d35e6b409e0
mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents:
2979
diff
changeset
|
86 header('HTTP/1.0 403 Forbidden'); |
5d35e6b409e0
mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents:
2979
diff
changeset
|
87 exit; |
5d35e6b409e0
mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents:
2979
diff
changeset
|
88 } |
2333
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
89 } |
3216
5d35e6b409e0
mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents:
2979
diff
changeset
|
90 else { |
5d35e6b409e0
mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents:
2979
diff
changeset
|
91 if($upload_token !== $calculated_token) { |
5d35e6b409e0
mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents:
2979
diff
changeset
|
92 error_log("Token mismatch: calculated $calculated_token got $upload_token"); |
5d35e6b409e0
mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents:
2979
diff
changeset
|
93 header('HTTP/1.0 403 Forbidden'); |
5d35e6b409e0
mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents:
2979
diff
changeset
|
94 exit; |
5d35e6b409e0
mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents:
2979
diff
changeset
|
95 } |
5d35e6b409e0
mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack
Matthew Wild <mwild1@gmail.com>
parents:
2979
diff
changeset
|
96 } |
2333
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
97 /* Open a file for writing */ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
98 $store_file = fopen($store_file_name, 'x'); |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
99 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
100 if($store_file === FALSE) { |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
101 header('HTTP/1.0 409 Conflict'); |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
102 exit; |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
103 } |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
104 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
105 /* PUT data comes in on the stdin stream */ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
106 $incoming_data = fopen('php://input', 'r'); |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
107 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
108 /* Read the data a chunk at a time and write to the file */ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
109 while ($data = fread($incoming_data, $CONFIG_CHUNK_SIZE)) { |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
110 fwrite($store_file, $data); |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
111 } |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
112 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
113 /* Close the streams */ |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
114 fclose($incoming_data); |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
115 fclose($store_file); |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
116 } else if($request_method === 'GET' || $request_method === 'HEAD') { |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
117 // Send file (using X-Sendfile would be nice here...) |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
118 if(file_exists($store_file_name)) { |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
119 header('Content-Disposition: attachment'); |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
120 header('Content-Type: application/octet-stream'); |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
121 header('Content-Length: '.filesize($store_file_name)); |
3227
62c82d097017
mod_http_upload_external: share.php: Fix whitespace
Matthew Wild <mwild1@gmail.com>
parents:
3226
diff
changeset
|
122 header("Content-Security-Policy: \"default-src 'none'\""); |
62c82d097017
mod_http_upload_external: share.php: Fix whitespace
Matthew Wild <mwild1@gmail.com>
parents:
3226
diff
changeset
|
123 header("X-Content-Security-Policy: \"default-src 'none'\""); |
62c82d097017
mod_http_upload_external: share.php: Fix whitespace
Matthew Wild <mwild1@gmail.com>
parents:
3226
diff
changeset
|
124 header("X-WebKit-CSP: \"default-src 'none'\""); |
2333
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
125 if($request_method !== 'HEAD') { |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
126 readfile($store_file_name); |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
127 } |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
128 } else { |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
129 header('HTTP/1.0 404 Not Found'); |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
130 } |
3226
3b13f19652e2
mod_http_upload_external: Update share.php and share_v2.php to allow cross-domain requests
Matthew Wild <mwild1@gmail.com>
parents:
3216
diff
changeset
|
131 } else if($request_method === 'OPTIONS') { |
2333
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
132 } else { |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
133 header('HTTP/1.0 400 Bad Request'); |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
134 } |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
135 |
f86478a02b25
mod_http_upload_external: Add share.php example implementation
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
136 exit; |