cuqmbr/single_php_filehost
1
0
Fork 0
mirror of https://github.com/Rouji/single_php_filehost.git synced 2025-04-04 16:39:34 +00:00
Code

Return early on move_uploaded_files() error

Browse Source
This commit is contained in:
mul91n 2021-08-14 15:30:48 +10:00
parent 1c7d3d2abc
commit 68d8c33687
1 changed files with 48 additions and 49 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

97
index.php
View File

@ -147,58 +147,57 @@ function store_file($name, $tmpfile, $formatted = false)
} }
$res = move_uploaded_file($tmpfile, $target_file); $res = move_uploaded_file($tmpfile, $target_file);
if ($res) if (!$res)
{
if ($EXTERNAL_HOOK !== null)
{
putenv("REMOTE_ADDR=".$_SERVER['REMOTE_ADDR']);
putenv("ORIGINAL_NAME=".$name);
putenv("STORED_FILE=".$target_file);
$ret = -1;
$out = exec($EXTERNAL_HOOK, $_ = null, $ret);
if ($out !== false && $ret !== 0)
{
unlink($target_file);
header("HTTP/1.0 400 Bad Request");
print("Error: ".$out."\n");
return;
}
}
//print the download link of the file
$url = sprintf('%s://%s/'.$DOWNLOAD_PATH,
$HTTP_PROTO,
$_SERVER["SERVER_NAME"],
$basename);
if ($formatted)
{
printf('<pre>Access your file here: <a href="%s">%s</a></pre>', $url, $url);
}
else
{
printf($url."\n");
}
// log uploader's IP, original filename, etc.
if ($LOG_PATH)
{
file_put_contents(
$LOG_PATH,
implode("\t", array(
date('c'),
$_SERVER['REMOTE_ADDR'],
filesize($tmpfile),
escapeshellarg($name),
$basename
)) . "\n",
FILE_APPEND
);
}
}
else
{ {
//TODO: proper error handling? //TODO: proper error handling?
header("HTTP/1.0 520 Unknown Error"); header("HTTP/1.0 520 Unknown Error");
return;
}
if ($EXTERNAL_HOOK !== null)
{
putenv("REMOTE_ADDR=".$_SERVER['REMOTE_ADDR']);
putenv("ORIGINAL_NAME=".$name);
putenv("STORED_FILE=".$target_file);
$ret = -1;
$out = exec($EXTERNAL_HOOK, $_ = null, $ret);
if ($out !== false && $ret !== 0)
{
unlink($target_file);
header("HTTP/1.0 400 Bad Request");
print("Error: ".$out."\n");
return;
}
}
//print the download link of the file
$url = sprintf('%s://%s/'.$DOWNLOAD_PATH,
$HTTP_PROTO,
$_SERVER["SERVER_NAME"],
$basename);
if ($formatted)
{
printf('<pre>Access your file here: <a href="%s">%s</a></pre>', $url, $url);
}
else
{
printf($url."\n");
}
// log uploader's IP, original filename, etc.
if ($LOG_PATH)
{
file_put_contents(
$LOG_PATH,
implode("\t", array(
date('c'),
$_SERVER['REMOTE_ADDR'],
filesize($tmpfile),
escapeshellarg($name),
$basename
)) . "\n",
FILE_APPEND
);
} }
} }