prosody-modules: mod_http_upload_external/share.php annotate

annotate mod_http_upload_external/share.php @ 5186:fa3059e653fa

mod_http_oauth2: Implement the Implicit flow Everyone says this is insecure and bad, but it's also the only thing that makes sense for e.g. pure JavaScript clients, but hey implement this even more complicated thing instead!

author	Kim Alvefur <zash@zash.se>
date	Thu, 02 Mar 2023 22:06:50 +0100
parents	b0ad1604f77e
children

rev	line source
2333 f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	1 <?php
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	2
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	3 /*
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	4 PHP script to handle file uploads and downloads for Prosody's mod_http_upload_external
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	5
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	6 Tested with Apache 2.2+ and PHP 5.3+
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	7
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	8 ** Why this script?
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	9
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	10 This script only allows uploads that have been authorized by mod_http_upload_external. It
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	11 attempts to make the upload/download as safe as possible, considering that there are many
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	12 security concerns involved with allowing arbitrary file upload/download on a web server.
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	13
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	14 With that said, I do not consider myself a PHP developer, and at the time of writing, this
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	15 code has had no external review. Use it at your own risk. I make no claims that this code
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	16 is secure.
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	17
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	18 ** How to use?
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	19
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	20 Drop this file somewhere it will be served by your web server. Edit the config options below.
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	21
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	22 In Prosody set:
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	23
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	24 http_upload_external_base_url = "https://your.example.com/path/to/share.php/"
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	25 http_upload_external_secret = "this is your secret string"
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	26
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	27 ** License
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	28
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	29 (C) 2016 Matthew Wild <mwild1@gmail.com>
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	30
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	31 Permission is hereby granted, free of charge, to any person obtaining a copy of this software
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	32 and associated documentation files (the "Software"), to deal in the Software without restriction,
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	33 including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense,
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	34 and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so,
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	35 subject to the following conditions:
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	36
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	37 The above copyright notice and this permission notice shall be included in all copies or substantial
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	38 portions of the Software.
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	39
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	40 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	41 BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	42 NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM,
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	43 DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	44 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	45
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	46 */
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	47
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	48 /\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	49 /* CONFIGURATION OPTIONS */
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	50 /\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	51
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	52 /* Change this to a directory that is writable by your web server, but is outside your web root */
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	53 $CONFIG_STORE_DIR = '/tmp';
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	54
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	55 /* This must be the same as 'http_upload_external_secret' that you set in Prosody's config file */
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	56 $CONFIG_SECRET = 'this is your secret string';
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	57
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	58 /* For people who need options to tweak that they don't understand... here you are */
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	59 $CONFIG_CHUNK_SIZE = 4096;
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	60
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	61 /\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	62 /* END OF CONFIGURATION */
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	63 /\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	64
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	65 /* Do not edit below this line unless you know what you are doing (spoiler: nobody does) */
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	66
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	67 $upload_file_name = substr($_SERVER['PHP_SELF'], strlen($_SERVER['SCRIPT_NAME'])+1);
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	68 $store_file_name = $CONFIG_STORE_DIR . '/store-' . hash('sha256', $upload_file_name);
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	69
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	70 $request_method = $_SERVER['REQUEST_METHOD'];
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	71
3226 3b13f19652e2 mod_http_upload_external: Update share.php and share_v2.php to allow cross-domain requests Matthew Wild <mwild1@gmail.com> parents: 3216 diff changeset	72 /* Set CORS headers */
3b13f19652e2 mod_http_upload_external: Update share.php and share_v2.php to allow cross-domain requests Matthew Wild <mwild1@gmail.com> parents: 3216 diff changeset	73 header('Access-Control-Allow-Methods: GET, PUT, OPTIONS');
3b13f19652e2 mod_http_upload_external: Update share.php and share_v2.php to allow cross-domain requests Matthew Wild <mwild1@gmail.com> parents: 3216 diff changeset	74 header('Access-Control-Allow-Headers: Content-Type');
3b13f19652e2 mod_http_upload_external: Update share.php and share_v2.php to allow cross-domain requests Matthew Wild <mwild1@gmail.com> parents: 3216 diff changeset	75 header('Access-Control-Max-Age: 7200');
3b13f19652e2 mod_http_upload_external: Update share.php and share_v2.php to allow cross-domain requests Matthew Wild <mwild1@gmail.com> parents: 3216 diff changeset	76 header('Access-Control-Allow-Origin: *');
3b13f19652e2 mod_http_upload_external: Update share.php and share_v2.php to allow cross-domain requests Matthew Wild <mwild1@gmail.com> parents: 3216 diff changeset	77
2333 f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	78 if(array_key_exists('v', $_GET) === TRUE && $request_method === 'PUT') {
2979 9480ca61294d mod_http_upload_external: Fix syntax error in share.php Matthew Wild <mwild1@gmail.com> parents: 2977 diff changeset	79 $upload_file_size = $_SERVER['CONTENT_LENGTH'];
2333 f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	80 $upload_token = $_GET['v'];
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	81
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	82 $calculated_token = hash_hmac('sha256', "$upload_file_name $upload_file_size", $CONFIG_SECRET);
3216 5d35e6b409e0 mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack Matthew Wild <mwild1@gmail.com> parents: 2979 diff changeset	83 if(function_exists('hash_equals')) {
5d35e6b409e0 mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack Matthew Wild <mwild1@gmail.com> parents: 2979 diff changeset	84 if(hash_equals($calculated_token, $upload_token) !== TRUE) {
5d35e6b409e0 mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack Matthew Wild <mwild1@gmail.com> parents: 2979 diff changeset	85 error_log("Token mismatch: calculated $calculated_token got $upload_token");
5d35e6b409e0 mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack Matthew Wild <mwild1@gmail.com> parents: 2979 diff changeset	86 header('HTTP/1.0 403 Forbidden');
5d35e6b409e0 mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack Matthew Wild <mwild1@gmail.com> parents: 2979 diff changeset	87 exit;
5d35e6b409e0 mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack Matthew Wild <mwild1@gmail.com> parents: 2979 diff changeset	88 }
2333 f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	89 }
3216 5d35e6b409e0 mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack Matthew Wild <mwild1@gmail.com> parents: 2979 diff changeset	90 else {
5d35e6b409e0 mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack Matthew Wild <mwild1@gmail.com> parents: 2979 diff changeset	91 if($upload_token !== $calculated_token) {
5d35e6b409e0 mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack Matthew Wild <mwild1@gmail.com> parents: 2979 diff changeset	92 error_log("Token mismatch: calculated $calculated_token got $upload_token");
5d35e6b409e0 mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack Matthew Wild <mwild1@gmail.com> parents: 2979 diff changeset	93 header('HTTP/1.0 403 Forbidden');
5d35e6b409e0 mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack Matthew Wild <mwild1@gmail.com> parents: 2979 diff changeset	94 exit;
5d35e6b409e0 mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack Matthew Wild <mwild1@gmail.com> parents: 2979 diff changeset	95 }
5d35e6b409e0 mod_http_upload_external: share.php: Use hash_equals() if available to protect against timing attack Matthew Wild <mwild1@gmail.com> parents: 2979 diff changeset	96 }
2333 f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	97 /* Open a file for writing */
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	98 $store_file = fopen($store_file_name, 'x');
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	99
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	100 if($store_file === FALSE) {
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	101 header('HTTP/1.0 409 Conflict');
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	102 exit;
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	103 }
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	104
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	105 /* PUT data comes in on the stdin stream */
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	106 $incoming_data = fopen('php://input', 'r');
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	107
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	108 /* Read the data a chunk at a time and write to the file */
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	109 while ($data = fread($incoming_data, $CONFIG_CHUNK_SIZE)) {
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	110 fwrite($store_file, $data);
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	111 }
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	112
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	113 /* Close the streams */
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	114 fclose($incoming_data);
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	115 fclose($store_file);
4310 b0ad1604f77e mod_http_upload_external: update php scripts to return HTTP 201 Created on upload Richard Schwab <hgprosodyim-lawrpxz9uw@central-intelligence.agency> parents: 3227 diff changeset	116
b0ad1604f77e mod_http_upload_external: update php scripts to return HTTP 201 Created on upload Richard Schwab <hgprosodyim-lawrpxz9uw@central-intelligence.agency> parents: 3227 diff changeset	117 // https://xmpp.org/extensions/xep-0363.html#upload
b0ad1604f77e mod_http_upload_external: update php scripts to return HTTP 201 Created on upload Richard Schwab <hgprosodyim-lawrpxz9uw@central-intelligence.agency> parents: 3227 diff changeset	118 // A HTTP status Code of 201 means that the server is now ready to serve the file via the provided GET URL.
b0ad1604f77e mod_http_upload_external: update php scripts to return HTTP 201 Created on upload Richard Schwab <hgprosodyim-lawrpxz9uw@central-intelligence.agency> parents: 3227 diff changeset	119 header('HTTP/1.0 201 Created');
b0ad1604f77e mod_http_upload_external: update php scripts to return HTTP 201 Created on upload Richard Schwab <hgprosodyim-lawrpxz9uw@central-intelligence.agency> parents: 3227 diff changeset	120 exit;
2333 f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	121 } else if($request_method === 'GET' \|\| $request_method === 'HEAD') {
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	122 // Send file (using X-Sendfile would be nice here...)
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	123 if(file_exists($store_file_name)) {
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	124 header('Content-Disposition: attachment');
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	125 header('Content-Type: application/octet-stream');
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	126 header('Content-Length: '.filesize($store_file_name));
3227 62c82d097017 mod_http_upload_external: share.php: Fix whitespace Matthew Wild <mwild1@gmail.com> parents: 3226 diff changeset	127 header("Content-Security-Policy: \"default-src 'none'\"");
62c82d097017 mod_http_upload_external: share.php: Fix whitespace Matthew Wild <mwild1@gmail.com> parents: 3226 diff changeset	128 header("X-Content-Security-Policy: \"default-src 'none'\"");
62c82d097017 mod_http_upload_external: share.php: Fix whitespace Matthew Wild <mwild1@gmail.com> parents: 3226 diff changeset	129 header("X-WebKit-CSP: \"default-src 'none'\"");
2333 f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	130 if($request_method !== 'HEAD') {
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	131 readfile($store_file_name);
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	132 }
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	133 } else {
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	134 header('HTTP/1.0 404 Not Found');
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	135 }
3226 3b13f19652e2 mod_http_upload_external: Update share.php and share_v2.php to allow cross-domain requests Matthew Wild <mwild1@gmail.com> parents: 3216 diff changeset	136 } else if($request_method === 'OPTIONS') {
2333 f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	137 } else {
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	138 header('HTTP/1.0 400 Bad Request');
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	139 }
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	140
f86478a02b25 mod_http_upload_external: Add share.php example implementation Matthew Wild <mwild1@gmail.com> parents: diff changeset	141 exit;

Mercurial > prosody-modules

annotate mod_http_upload_external/share.php @ 5186:fa3059e653fa