static/api.php at main · JustAuthMe/static · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
<?php
require_once 'config.dist.php';

const UPLOAD_DIR = 'medias/';
define('ROOT', str_replace('api.php', '', $_SERVER['SCRIPT_FILENAME']));

function isJamInternal() {
    return isset($_SERVER['HTTP_X_ACCESS_TOKEN']) && $_SERVER['HTTP_X_ACCESS_TOKEN'] === JAM_INTERNAL_API_KEY;
}

header('Content-Type: application/json');
$http_status = '401 Unauthorized';
$response = ['status' => 'error', 'message' => 'Authentication failed'];

$args = explode('/', $_GET['arg']);

if (isJamInternal()) {
    switch ($_SERVER['REQUEST_METHOD']) {
        case 'POST':
            $is_proper_file = isset($_FILES['file']) && $_FILES['file']['size'] > 0;
            $is_base64 = isset($_POST['file']) && $_POST['file'] !== '';
            $file = $is_proper_file ? $_FILES['file'] : ($is_base64 ? $_POST['file'] : null);

            if (!$is_base64 || isset($file['name'], $file['content'])) {
                if ($file !== null) {
                    $ext = strtolower(pathinfo($file['name'], PATHINFO_EXTENSION));
                    if (in_array($ext, ALLOWED_FILE_EXTENSIONS)) {
                        $filename = UPLOAD_DIR . uniqid() . '.' . $ext;

                        if ($is_proper_file) {
                            move_uploaded_file($file['tmp_name'], ROOT . $filename);
                        } else {
                            file_put_contents(ROOT . $filename, file_get_contents($file['content']));
                        }

                        $response = ['status' => 'success', 'url' => 'https://static.justauth.me/' . $filename];
                    } else {
                        $response['message'] = 'Forbidden file extension';
                    }
                } else {
                    $response['message'] = 'No such file';
                }
            } else {
                $response['message'] = 'File name and content are required when file is transferred in base 64';
            }
            break;

        case 'DELETE':
            $filename = ROOT . UPLOAD_DIR . $args[0];

            if (file_exists($filename)) {
                unlink($filename);
                $response = ['status' => 'success'];
            } else {
                $http_status = '404 Not Found';
                $response['message'] = 'File not found';
            }
            break;

        default:
            $filename = UPLOAD_DIR . $args[0];
            $root_filename = ROOT . $filename;

            if (file_exists($root_filename)) {
                $response = [
                    'status' => 'success',
                    'url' => 'https://static.justauth.me/' . $filename,
                    'size' => filesize($root_filename),
                    'updated_at' => date('Y-m-d H:i:s', filemtime($root_filename))
                ];
            } else {
                $http_status = '404 Not Found';
                $response['message'] = 'File not found';
            }
    }
}

if ($response['status'] == 'success') {
    $http_status = '200 OK';
}

header('HTTP/1.1 ' . $http_status);
echo json_encode($response);