2023-04-09 10:58:09 +00:00
|
|
|
<?php
|
2023-07-04 23:52:36 +00:00
|
|
|
|
|
|
|
/**
|
|
|
|
* DO NOT TOUCH!!!!!!!!
|
|
|
|
*/
|
2023-07-07 01:20:49 +00:00
|
|
|
$SCRIPT_VERSION = "0.1.0"; // The version of the script
|
2023-04-09 10:58:09 +00:00
|
|
|
$before = microtime(true); // Start time of the script
|
2023-07-04 23:52:36 +00:00
|
|
|
$defaultSecretKey = "set me"; // The default secret key
|
2023-04-12 02:09:53 +00:00
|
|
|
header('Content-type:application/json;charset=utf-8'); // Set the response content type to JSON
|
2023-04-09 11:21:39 +00:00
|
|
|
|
|
|
|
/**
|
|
|
|
* Configuration
|
|
|
|
*/
|
2023-07-05 00:49:59 +00:00
|
|
|
|
|
|
|
if (getenv('DOCKER')) { // If the script is running in a Docker container
|
|
|
|
$uploadSecrets = explode(",", getenv('UPLOAD_SECRETS')); // The upload secrets
|
|
|
|
$uploadDir = getenv('UPLOAD_DIR'); // The upload directory
|
|
|
|
$useRandomFileNames = getenv('USE_RANDOM_FILE_NAMES'); // Use random file names instead of the original file name
|
2023-07-05 15:09:58 +00:00
|
|
|
$fileNameLength = getenv('FILE_NAME_LENGTH'); // The length of the random file name
|
2023-07-05 00:49:59 +00:00
|
|
|
$shouldConvertToWebp = getenv('SHOULD_CONVERT_TO_WEBP'); // Should the script convert images to webp?
|
|
|
|
$webpQuality = getenv('WEBP_QUALITY'); // The quality of the webp image (0-100)
|
|
|
|
$webpThreadhold = getenv('WEBP_THREADHOLD'); // The minimum file size for converting to webp (in bytes)
|
2023-07-05 00:08:00 +00:00
|
|
|
} else {
|
2023-07-05 00:49:59 +00:00
|
|
|
/**
|
|
|
|
* !!!
|
|
|
|
* USE THIS IF YOU ARE NOT USING DOCKER
|
|
|
|
* !!!
|
|
|
|
*/
|
|
|
|
$uploadSecrets = array("set me"); // The upload secrets
|
|
|
|
$uploadDir = "./"; // The upload directory
|
|
|
|
$useRandomFileNames = false; // Use random file names instead of the original file name
|
2023-07-05 15:09:58 +00:00
|
|
|
$fileNameLength = 8; // The length of the random file name
|
2023-07-05 00:49:59 +00:00
|
|
|
$shouldConvertToWebp = true; // Should the script convert images to webp?
|
|
|
|
$webpQuality = 95; // The quality of the webp image (0-100)
|
|
|
|
$webpThreadhold = 1048576; // 1MB - The minimum file size for converting to webp (in bytes)
|
2023-07-05 00:08:00 +00:00
|
|
|
}
|
2023-04-09 10:58:09 +00:00
|
|
|
|
|
|
|
/**
|
2023-04-09 18:26:35 +00:00
|
|
|
* Check if the given secret is valid
|
2023-04-09 10:58:09 +00:00
|
|
|
*/
|
2023-04-09 18:41:52 +00:00
|
|
|
function checkSecret($secret): bool
|
2023-04-09 16:30:23 +00:00
|
|
|
{
|
2023-04-09 18:25:01 +00:00
|
|
|
global $uploadSecrets;
|
2023-04-09 18:41:52 +00:00
|
|
|
return isset($secret) && in_array($secret, $uploadSecrets);
|
2023-04-09 10:58:09 +00:00
|
|
|
}
|
|
|
|
|
2023-04-09 11:17:17 +00:00
|
|
|
/**
|
|
|
|
* Generate a random string
|
|
|
|
*/
|
2023-04-09 16:30:23 +00:00
|
|
|
function generateRandomString($length = 10): string
|
|
|
|
{
|
2023-04-09 11:17:17 +00:00
|
|
|
$characters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
|
|
|
|
$charactersLength = strlen($characters);
|
|
|
|
$randomString = '';
|
2023-07-04 23:44:51 +00:00
|
|
|
|
2023-04-09 11:17:17 +00:00
|
|
|
for ($i = 0; $i < $length; $i++) {
|
2023-07-04 23:44:51 +00:00
|
|
|
// Shuffle the characters array
|
|
|
|
$shuffledCharacters = str_shuffle($characters);
|
|
|
|
$randomIndex = random_int(0, $charactersLength - 1);
|
|
|
|
$randomString .= $shuffledCharacters[$randomIndex];
|
2023-04-09 11:17:17 +00:00
|
|
|
}
|
2023-07-04 23:44:51 +00:00
|
|
|
|
2023-04-09 11:17:17 +00:00
|
|
|
return $randomString;
|
|
|
|
}
|
|
|
|
|
2023-04-09 16:36:53 +00:00
|
|
|
/**
|
|
|
|
* Get the time taken to execute the script
|
|
|
|
*/
|
|
|
|
function getTimeTaken()
|
|
|
|
{
|
|
|
|
global $before;
|
|
|
|
return round(microtime(true) - $before, 3) . "ms";
|
|
|
|
}
|
|
|
|
|
2023-04-09 10:58:09 +00:00
|
|
|
/**
|
|
|
|
* Return a JSON response
|
|
|
|
*/
|
2023-04-09 16:30:23 +00:00
|
|
|
function returnJson($data): void
|
|
|
|
{
|
|
|
|
echo (json_encode($data));
|
2023-04-09 10:58:09 +00:00
|
|
|
die();
|
|
|
|
}
|
|
|
|
|
2023-07-07 01:20:49 +00:00
|
|
|
/**
|
|
|
|
* Log to nginx
|
|
|
|
*/
|
|
|
|
function logToNginx($message): void
|
|
|
|
{
|
|
|
|
error_log($message);
|
|
|
|
}
|
|
|
|
|
2023-04-09 11:21:39 +00:00
|
|
|
try {
|
2023-07-07 22:59:27 +00:00
|
|
|
$secret = isset($_POST['secret']) ? $_POST['secret'] : null; // The secret key
|
|
|
|
$file = isset($_FILES['sharex']) ? $_FILES['sharex'] : null; // The uploaded file
|
2023-04-09 10:58:09 +00:00
|
|
|
|
2023-07-07 22:37:47 +00:00
|
|
|
// Page to show if someone visits the upload script
|
2023-07-07 22:59:27 +00:00
|
|
|
if ($secret == null && $file == null) {
|
2023-07-07 01:20:49 +00:00
|
|
|
returnJson(array(
|
|
|
|
'status' => 'OK',
|
|
|
|
'url' => 'Welcome to the ShareX PHP Uploader! v' . $SCRIPT_VERSION,
|
|
|
|
// Remove this if you don't want to show the support URL
|
|
|
|
'support' => "For support, visit - https://git.fascinated.cc/Fascinated/sharex-php-uploader",
|
|
|
|
'timeTaken' => getTimeTaken()
|
|
|
|
));
|
|
|
|
die();
|
|
|
|
}
|
|
|
|
|
2023-04-09 11:21:39 +00:00
|
|
|
// Check if the token is valid
|
2023-04-09 18:41:52 +00:00
|
|
|
if (!checkSecret($secret)) {
|
2023-04-09 16:30:23 +00:00
|
|
|
returnJson(array(
|
|
|
|
'status' => 'ERROR',
|
2023-04-09 16:37:56 +00:00
|
|
|
'url' => 'Invalid or missing upload secret',
|
2023-04-09 16:36:53 +00:00
|
|
|
'timeTaken' => getTimeTaken()
|
2023-04-09 16:30:23 +00:00
|
|
|
));
|
2023-07-07 01:20:49 +00:00
|
|
|
logToNginx("An upload was attempted with an invalid secret key: " . $secret);
|
2023-04-09 11:21:39 +00:00
|
|
|
die();
|
|
|
|
}
|
2023-04-09 10:58:09 +00:00
|
|
|
|
2023-07-04 23:41:33 +00:00
|
|
|
// Check if the secret is the default one, and if so, tell the user to change it
|
2023-07-04 23:52:36 +00:00
|
|
|
if ($secret == $defaultSecretKey) {
|
2023-07-04 23:41:33 +00:00
|
|
|
returnJson(array(
|
|
|
|
'status' => 'ERROR',
|
|
|
|
'url' => 'You need to set your upload secret in the configuration section of the upload.php file',
|
|
|
|
'timeTaken' => getTimeTaken()
|
|
|
|
));
|
2023-07-07 01:20:49 +00:00
|
|
|
logToNginx("An upload was attempted with the default secret key");
|
2023-07-04 23:41:33 +00:00
|
|
|
die();
|
|
|
|
}
|
|
|
|
|
2023-04-09 11:21:39 +00:00
|
|
|
// Check if the file was uploaded
|
|
|
|
if (!isset($file)) {
|
2023-04-09 16:30:23 +00:00
|
|
|
returnJson(array(
|
|
|
|
'status' => 'ERROR',
|
2023-04-09 16:37:56 +00:00
|
|
|
'url' => 'No file was uploaded',
|
2023-04-09 16:36:53 +00:00
|
|
|
'timeTaken' => getTimeTaken()
|
2023-04-09 16:30:23 +00:00
|
|
|
));
|
2023-07-07 01:20:49 +00:00
|
|
|
logToNginx("An upload was attempted without providing a file");
|
2023-04-09 11:21:39 +00:00
|
|
|
die();
|
|
|
|
}
|
2023-04-09 10:58:09 +00:00
|
|
|
|
2023-07-07 01:20:49 +00:00
|
|
|
$originalFileName = preg_replace("/[^A-Za-z0-9_.]/", '', $_FILES["sharex"]["name"]); // Remove unwanted characters
|
|
|
|
$fileType = pathinfo($originalFileName, PATHINFO_EXTENSION); // File extension (e.g. png, jpg, etc.)
|
|
|
|
$fileSize = $_FILES["sharex"]["size"]; // File size in bytes
|
2023-04-09 10:58:09 +00:00
|
|
|
|
2023-04-09 11:21:39 +00:00
|
|
|
// Check if the file already exists
|
2023-07-07 01:20:49 +00:00
|
|
|
if (file_exists($uploadDir . $originalFileName)) {
|
2023-04-09 16:30:23 +00:00
|
|
|
returnJson(array(
|
|
|
|
'status' => 'ERROR',
|
2023-04-09 16:37:56 +00:00
|
|
|
'url' => 'File already exists',
|
2023-04-09 16:36:53 +00:00
|
|
|
'timeTaken' => getTimeTaken()
|
2023-04-09 16:30:23 +00:00
|
|
|
));
|
2023-07-07 01:20:49 +00:00
|
|
|
logToNginx("An upload was attempted with a file that already exists: " . $originalFileName);
|
2023-04-09 11:21:39 +00:00
|
|
|
die();
|
|
|
|
}
|
2023-04-09 11:05:53 +00:00
|
|
|
|
2023-07-07 01:20:49 +00:00
|
|
|
$finalName = $originalFileName; // The final name of the file
|
2023-04-09 11:21:39 +00:00
|
|
|
if ($useRandomFileNames) { // Generate a random file name if enabled
|
|
|
|
$finalName = generateRandomString($fileNameLength) . "." . $fileType;
|
|
|
|
}
|
2023-04-09 11:17:17 +00:00
|
|
|
|
2023-04-12 02:09:53 +00:00
|
|
|
$needsToBeSaved = true; // Whether the file needs to be saved
|
2023-04-09 18:41:52 +00:00
|
|
|
|
2023-07-06 01:34:51 +00:00
|
|
|
// Check the file type and size
|
|
|
|
if ($shouldConvertToWebp && in_array($fileType, ["png", "jpeg", "jpg"]) && $_FILES["sharex"]["size"] > $webpThreadhold) {
|
2023-07-07 23:51:33 +00:00
|
|
|
$image = imagecreatefromstring(file_get_contents($_FILES["sharex"]["tmp_name"]));
|
2023-07-06 01:34:51 +00:00
|
|
|
$webp_file = pathinfo($finalName, PATHINFO_FILENAME) . ".webp";
|
2023-07-07 23:51:33 +00:00
|
|
|
imagewebp($image, $webp_file, 90); // Convert the image and save it
|
|
|
|
imagedestroy($image); // Free up memory
|
2023-07-06 01:34:51 +00:00
|
|
|
$finalName = $webp_file;
|
2023-07-07 23:51:33 +00:00
|
|
|
$shouldSave = false;
|
|
|
|
$fileSize = filesize($webp_file); // Update the file size
|
2023-04-09 11:21:39 +00:00
|
|
|
}
|
2023-04-09 10:58:09 +00:00
|
|
|
|
2023-04-12 02:09:53 +00:00
|
|
|
if ($needsToBeSaved) { // Save the file if it has not been saved yet
|
2023-04-09 11:21:39 +00:00
|
|
|
// Move the file to the uploads folder
|
2023-04-09 18:41:52 +00:00
|
|
|
$success = move_uploaded_file($_FILES["sharex"]["tmp_name"], $uploadDir . $finalName);
|
|
|
|
if (!$success) {
|
2023-04-09 16:30:23 +00:00
|
|
|
returnJson(array(
|
2023-04-09 18:41:52 +00:00
|
|
|
'status' => 'ERROR',
|
|
|
|
'url' => 'Failed to save file. Check the permissions of the upload directory.',
|
2023-04-09 16:36:53 +00:00
|
|
|
'timeTaken' => getTimeTaken()
|
2023-04-09 16:30:23 +00:00
|
|
|
));
|
2023-07-07 01:20:49 +00:00
|
|
|
logToNginx("An upload was attempted but the file could not be saved: " . $finalName);
|
2023-04-09 16:40:37 +00:00
|
|
|
die();
|
2023-04-09 11:21:39 +00:00
|
|
|
}
|
2023-04-09 11:17:17 +00:00
|
|
|
}
|
2023-04-09 16:30:23 +00:00
|
|
|
returnJson(array(
|
|
|
|
'status' => 'OK',
|
2023-04-09 16:40:37 +00:00
|
|
|
'url' => $finalName,
|
2023-04-09 16:36:53 +00:00
|
|
|
'timeTaken' => getTimeTaken()
|
2023-04-09 16:30:23 +00:00
|
|
|
));
|
2023-07-07 01:20:49 +00:00
|
|
|
logToNginx("An upload was successful. original id: $originalFileName, final id: $finalName, size: $fileSize");
|
2023-04-09 15:54:20 +00:00
|
|
|
die();
|
2023-04-09 11:22:39 +00:00
|
|
|
} catch (Exception $e) { // Handle any errors
|
2023-04-09 16:30:23 +00:00
|
|
|
returnJson(array(
|
|
|
|
'status' => 'ERROR',
|
2023-04-09 16:37:56 +00:00
|
|
|
'url' => $e->getMessage(),
|
2023-04-09 16:36:53 +00:00
|
|
|
'timeTaken' => getTimeTaken()
|
2023-04-09 16:30:23 +00:00
|
|
|
));
|
2023-07-07 01:20:49 +00:00
|
|
|
logToNginx("An upload was attempted but an error occurred: " . $e->getMessage());
|
2023-04-09 11:17:17 +00:00
|
|
|
die();
|
2023-04-09 10:58:09 +00:00
|
|
|
}
|