Personal/drupal-civicrm
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

First commit

Browse source
This commit is contained in:
Theodotos Andreou 2018-01-14 13:10:16 +00:00
commit c6e2478c40
13918 changed files with 2303184 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

102
sites/all/modules/civicrm/CRM/Contact/Page/ImageFile.php Normal file
View file

@ -0,0 +1,102 @@
<?php
/*
+--------------------------------------------------------------------+
| CiviCRM version 4.7 |
+--------------------------------------------------------------------+
| Copyright CiviCRM LLC (c) 2004-2017 |
+--------------------------------------------------------------------+
| This file is a part of CiviCRM. |
| |
| CiviCRM is free software; you can copy, modify, and distribute it |
| under the terms of the GNU Affero General Public License |
| Version 3, 19 November 2007 and the CiviCRM Licensing Exception. |
| |
| CiviCRM is distributed in the hope that it will be useful, but |
| WITHOUT ANY WARRANTY; without even the implied warranty of |
| MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. |
| See the GNU Affero General Public License for more details. |
| |
| You should have received a copy of the GNU Affero General Public |
| License and the CiviCRM Licensing Exception along |
| with this program; if not, contact CiviCRM LLC |
| at info[AT]civicrm[DOT]org. If you have questions about the |
| GNU Affero General Public License or the licensing of CiviCRM, |
| see the CiviCRM license FAQ at http://civicrm.org/licensing |
+--------------------------------------------------------------------+
*/
/**
*
* @package CRM
* @copyright CiviCRM LLC (c) 2004-2017
*/
class CRM_Contact_Page_ImageFile extends CRM_Core_Page {
/**
* @var int Time to live (seconds).
*
* 12 hours: 12 * 60 * 60 = 43200
*/
private $ttl = 43200;
/**
* Run page.
*
* @throws \Exception
*/
public function run() {
if (!preg_match('/^[^\/]+\.(jpg|jpeg|png|gif)$/i', $_GET['photo'])) {
CRM_Core_Error::fatal('Malformed photo name');
}
// FIXME Optimize performance of image_url query
$sql = "SELECT id FROM civicrm_contact WHERE image_url like %1;";
$params = array(
1 => array("%" . $_GET['photo'], 'String'),
);
$dao = CRM_Core_DAO::executeQuery($sql, $params);
$cid = NULL;
while ($dao->fetch()) {
$cid = $dao->id;
}
if ($cid) {
$config = CRM_Core_Config::singleton();
$fileExtension = strtolower(pathinfo($_GET['photo'], PATHINFO_EXTENSION));
$this->download(
$config->customFileUploadDir . $_GET['photo'],
'image/' . ($fileExtension == 'jpg' ? 'jpeg' : $fileExtension),
$this->ttl
);
CRM_Utils_System::civiExit();
}
else {
CRM_Core_Error::fatal('Photo does not exist');
}
}
/**
* Download image.
*
* @param string $file
* Local file path.
* @param string $mimeType
* @param int $ttl
* Time to live (seconds).
*/
protected function download($file, $mimeType, $ttl) {
if (!file_exists($file)) {
header("HTTP/1.0 404 Not Found");
return;
}
elseif (!is_readable($file)) {
header('HTTP/1.0 403 Forbidden');
return;
}
CRM_Utils_System::setHttpHeader('Expires', gmdate('D, d M Y H:i:s \G\M\T', CRM_Utils_Time::getTimeRaw() + $ttl));
CRM_Utils_System::setHttpHeader("Content-Type", $mimeType);
CRM_Utils_System::setHttpHeader("Content-Disposition", "inline; filename=\"" . basename($file) . "\"");
CRM_Utils_System::setHttpHeader("Cache-Control", "max-age=$ttl, public");
CRM_Utils_System::setHttpHeader('Pragma', 'public');
readfile($file);
}
}