sharex-php-uploader/upload.php

218 lines
6.8 KiB
PHP
Raw Normal View History

2023-04-09 10:58:09 +00:00
<?php
/**
* DO NOT TOUCH!!!!!!!!
*/
$SCRIPT_VERSION = "0.1.0"; // The version of the script
2023-04-09 10:58:09 +00:00
$before = microtime(true); // Start time of the script
$defaultSecretKey = "set me"; // The default secret key
2023-04-12 02:09:53 +00:00
header('Content-type:application/json;charset=utf-8'); // Set the response content type to JSON
/**
* Configuration
*/
2023-07-05 00:49:59 +00:00
if (getenv('DOCKER')) { // If the script is running in a Docker container
$uploadSecrets = explode(",", getenv('UPLOAD_SECRETS')); // The upload secrets
$uploadDir = getenv('UPLOAD_DIR'); // The upload directory
$useRandomFileNames = getenv('USE_RANDOM_FILE_NAMES'); // Use random file names instead of the original file name
2023-07-05 15:09:58 +00:00
$fileNameLength = getenv('FILE_NAME_LENGTH'); // The length of the random file name
2023-07-05 00:49:59 +00:00
$shouldConvertToWebp = getenv('SHOULD_CONVERT_TO_WEBP'); // Should the script convert images to webp?
$webpQuality = getenv('WEBP_QUALITY'); // The quality of the webp image (0-100)
$webpThreadhold = getenv('WEBP_THREADHOLD'); // The minimum file size for converting to webp (in bytes)
2023-07-05 00:08:00 +00:00
} else {
2023-07-05 00:49:59 +00:00
/**
* !!!
* USE THIS IF YOU ARE NOT USING DOCKER
* !!!
*/
$uploadSecrets = array("set me"); // The upload secrets
$uploadDir = "./"; // The upload directory
$useRandomFileNames = false; // Use random file names instead of the original file name
2023-07-05 15:09:58 +00:00
$fileNameLength = 8; // The length of the random file name
2023-07-05 00:49:59 +00:00
$shouldConvertToWebp = true; // Should the script convert images to webp?
$webpQuality = 95; // The quality of the webp image (0-100)
$webpThreadhold = 1048576; // 1MB - The minimum file size for converting to webp (in bytes)
2023-07-05 00:08:00 +00:00
}
2023-04-09 10:58:09 +00:00
/**
2023-04-09 18:26:35 +00:00
* Check if the given secret is valid
2023-04-09 10:58:09 +00:00
*/
2023-04-09 18:41:52 +00:00
function checkSecret($secret): bool
{
2023-04-09 18:25:01 +00:00
global $uploadSecrets;
2023-04-09 18:41:52 +00:00
return isset($secret) && in_array($secret, $uploadSecrets);
2023-04-09 10:58:09 +00:00
}
/**
* Generate a random string
*/
function generateRandomString($length = 10): string
{
$characters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
$charactersLength = strlen($characters);
$randomString = '';
for ($i = 0; $i < $length; $i++) {
// Shuffle the characters array
$shuffledCharacters = str_shuffle($characters);
$randomIndex = random_int(0, $charactersLength - 1);
$randomString .= $shuffledCharacters[$randomIndex];
}
return $randomString;
}
2023-04-09 16:36:53 +00:00
/**
* Get the time taken to execute the script
*/
function getTimeTaken()
{
global $before;
return round(microtime(true) - $before, 3) . "ms";
}
2023-04-09 10:58:09 +00:00
/**
* Return a JSON response
*/
function returnJson($data): void
{
echo (json_encode($data));
2023-04-09 10:58:09 +00:00
die();
}
/**
* Log to nginx
*/
function logToNginx($message): void
{
error_log($message);
}
try {
2023-07-07 22:59:27 +00:00
$secret = isset($_POST['secret']) ? $_POST['secret'] : null; // The secret key
$file = isset($_FILES['sharex']) ? $_FILES['sharex'] : null; // The uploaded file
2023-04-09 10:58:09 +00:00
2023-07-07 22:37:47 +00:00
// Page to show if someone visits the upload script
2023-07-07 22:59:27 +00:00
if ($secret == null && $file == null) {
returnJson(array(
'status' => 'OK',
'url' => 'Welcome to the ShareX PHP Uploader! v' . $SCRIPT_VERSION,
// Remove this if you don't want to show the support URL
'support' => "For support, visit - https://git.fascinated.cc/Fascinated/sharex-php-uploader",
'timeTaken' => getTimeTaken()
));
die();
}
// Check if the token is valid
2023-04-09 18:41:52 +00:00
if (!checkSecret($secret)) {
returnJson(array(
'status' => 'ERROR',
2023-04-09 16:37:56 +00:00
'url' => 'Invalid or missing upload secret',
2023-04-09 16:36:53 +00:00
'timeTaken' => getTimeTaken()
));
logToNginx("An upload was attempted with an invalid secret key: " . $secret);
die();
}
2023-04-09 10:58:09 +00:00
// Check if the secret is the default one, and if so, tell the user to change it
if ($secret == $defaultSecretKey) {
returnJson(array(
'status' => 'ERROR',
'url' => 'You need to set your upload secret in the configuration section of the upload.php file',
'timeTaken' => getTimeTaken()
));
logToNginx("An upload was attempted with the default secret key");
die();
}
// Check if the file was uploaded
if (!isset($file)) {
returnJson(array(
'status' => 'ERROR',
2023-04-09 16:37:56 +00:00
'url' => 'No file was uploaded',
2023-04-09 16:36:53 +00:00
'timeTaken' => getTimeTaken()
));
logToNginx("An upload was attempted without providing a file");
die();
}
2023-04-09 10:58:09 +00:00
$originalFileName = preg_replace("/[^A-Za-z0-9_.]/", '', $_FILES["sharex"]["name"]); // Remove unwanted characters
$fileType = pathinfo($originalFileName, PATHINFO_EXTENSION); // File extension (e.g. png, jpg, etc.)
$fileSize = $_FILES["sharex"]["size"]; // File size in bytes
2023-04-09 10:58:09 +00:00
// Check if the file already exists
if (file_exists($uploadDir . $originalFileName)) {
returnJson(array(
'status' => 'ERROR',
2023-04-09 16:37:56 +00:00
'url' => 'File already exists',
2023-04-09 16:36:53 +00:00
'timeTaken' => getTimeTaken()
));
logToNginx("An upload was attempted with a file that already exists: " . $originalFileName);
die();
}
$finalName = $originalFileName; // The final name of the file
if ($useRandomFileNames) { // Generate a random file name if enabled
$finalName = generateRandomString($fileNameLength) . "." . $fileType;
}
2023-04-12 02:09:53 +00:00
$needsToBeSaved = true; // Whether the file needs to be saved
2023-04-09 18:41:52 +00:00
// Check the file type and size
if ($shouldConvertToWebp && in_array($fileType, ["png", "jpeg", "jpg"]) && $_FILES["sharex"]["size"] > $webpThreadhold) {
// Create an Imagick object from the uploaded file
$image = new Imagick($_FILES["sharex"]["tmp_name"]);
// Convert the image to WebP
$image->setImageFormat("webp");
$image->setImageCompressionQuality($webpQuality);
// Set the output filename
$webp_file = pathinfo($finalName, PATHINFO_FILENAME) . ".webp";
// Save the converted image
$image->writeImage($webp_file);
// Free up memory
$image->clear();
$image->destroy();
$fileSize = filesize($webp_file); // Update the file size
// Update the final filename
$finalName = $webp_file;
$needsToBeSaved = false;
}
2023-04-09 10:58:09 +00:00
2023-04-12 02:09:53 +00:00
if ($needsToBeSaved) { // Save the file if it has not been saved yet
// Move the file to the uploads folder
2023-04-09 18:41:52 +00:00
$success = move_uploaded_file($_FILES["sharex"]["tmp_name"], $uploadDir . $finalName);
if (!$success) {
returnJson(array(
2023-04-09 18:41:52 +00:00
'status' => 'ERROR',
'url' => 'Failed to save file. Check the permissions of the upload directory.',
2023-04-09 16:36:53 +00:00
'timeTaken' => getTimeTaken()
));
logToNginx("An upload was attempted but the file could not be saved: " . $finalName);
2023-04-09 16:40:37 +00:00
die();
}
}
returnJson(array(
'status' => 'OK',
2023-04-09 16:40:37 +00:00
'url' => $finalName,
2023-04-09 16:36:53 +00:00
'timeTaken' => getTimeTaken()
));
logToNginx("An upload was successful. original id: $originalFileName, final id: $finalName, size: $fileSize");
2023-04-09 15:54:20 +00:00
die();
2023-04-09 11:22:39 +00:00
} catch (Exception $e) { // Handle any errors
returnJson(array(
'status' => 'ERROR',
2023-04-09 16:37:56 +00:00
'url' => $e->getMessage(),
2023-04-09 16:36:53 +00:00
'timeTaken' => getTimeTaken()
));
logToNginx("An upload was attempted but an error occurred: " . $e->getMessage());
die();
2023-04-09 10:58:09 +00:00
}