1 | ##### |
---|
2 | # FCKeditor - The text editor for Internet - http://www.fckeditor.net |
---|
3 | # Copyright (C) 2003-2009 Frederico Caldeira Knabben |
---|
4 | # |
---|
5 | # == BEGIN LICENSE == |
---|
6 | # |
---|
7 | # Licensed under the terms of any of the following licenses at your |
---|
8 | # choice: |
---|
9 | # |
---|
10 | # - GNU General Public License Version 2 or later (the "GPL") |
---|
11 | # http://www.gnu.org/licenses/gpl.html |
---|
12 | # |
---|
13 | # - GNU Lesser General Public License Version 2.1 or later (the "LGPL") |
---|
14 | # http://www.gnu.org/licenses/lgpl.html |
---|
15 | # |
---|
16 | # - Mozilla Public License Version 1.1 or later (the "MPL") |
---|
17 | # http://www.mozilla.org/MPL/MPL-1.1.html |
---|
18 | # |
---|
19 | # == END LICENSE == |
---|
20 | # |
---|
21 | # This is the File Manager Connector for Perl. |
---|
22 | ##### |
---|
23 | |
---|
24 | # image data save dir |
---|
25 | $img_dir = './temp/'; |
---|
26 | |
---|
27 | |
---|
28 | # File size max(unit KB) |
---|
29 | $MAX_CONTENT_SIZE = 30000; |
---|
30 | |
---|
31 | # After file is uploaded, sometimes it is required to change its permissions |
---|
32 | # so that it was possible to access it at the later time. |
---|
33 | # If possible, it is recommended to set more restrictive permissions, like 0755. |
---|
34 | # Set to 0 to disable this feature. |
---|
35 | $CHMOD_ON_UPLOAD = 0777; |
---|
36 | |
---|
37 | # See comments above. |
---|
38 | # Used when creating folders that does not exist. |
---|
39 | $CHMOD_ON_FOLDER_CREATE = 0755; |
---|
40 | |
---|
41 | # Filelock (1=use,0=not use) |
---|
42 | $PM{'flock'} = '1'; |
---|
43 | |
---|
44 | |
---|
45 | # upload Content-Type list |
---|
46 | my %UPLOAD_CONTENT_TYPE_LIST = ( |
---|
47 | 'image/(x-)?png' => 'png', # PNG image |
---|
48 | 'image/p?jpe?g' => 'jpg', # JPEG image |
---|
49 | 'image/gif' => 'gif', # GIF image |
---|
50 | 'image/x-xbitmap' => 'xbm', # XBM image |
---|
51 | |
---|
52 | 'image/(x-(MS-)?)?bmp' => 'bmp', # Windows BMP image |
---|
53 | 'image/pict' => 'pict', # Macintosh PICT image |
---|
54 | 'image/tiff' => 'tif', # TIFF image |
---|
55 | 'application/pdf' => 'pdf', # PDF image |
---|
56 | 'application/x-shockwave-flash' => 'swf', # Shockwave Flash |
---|
57 | |
---|
58 | 'video/(x-)?msvideo' => 'avi', # Microsoft Video |
---|
59 | 'video/quicktime' => 'mov', # QuickTime Video |
---|
60 | 'video/mpeg' => 'mpeg', # MPEG Video |
---|
61 | 'video/x-mpeg2' => 'mpv2', # MPEG2 Video |
---|
62 | |
---|
63 | 'audio/(x-)?midi?' => 'mid', # MIDI Audio |
---|
64 | 'audio/(x-)?wav' => 'wav', # WAV Audio |
---|
65 | 'audio/basic' => 'au', # ULAW Audio |
---|
66 | 'audio/mpeg' => 'mpga', # MPEG Audio |
---|
67 | |
---|
68 | 'application/(x-)?zip(-compressed)?' => 'zip', # ZIP Compress |
---|
69 | |
---|
70 | 'text/html' => 'html', # HTML |
---|
71 | 'text/plain' => 'txt', # TEXT |
---|
72 | '(?:application|text)/(?:rtf|richtext)' => 'rtf', # RichText |
---|
73 | |
---|
74 | 'application/msword' => 'doc', # Microsoft Word |
---|
75 | 'application/vnd.ms-excel' => 'xls', # Microsoft Excel |
---|
76 | |
---|
77 | '' |
---|
78 | ); |
---|
79 | |
---|
80 | # Upload is permitted. |
---|
81 | # A regular expression is possible. |
---|
82 | my %UPLOAD_EXT_LIST = ( |
---|
83 | 'png' => 'PNG image', |
---|
84 | 'p?jpe?g|jpe|jfif|pjp' => 'JPEG image', |
---|
85 | 'gif' => 'GIF image', |
---|
86 | 'xbm' => 'XBM image', |
---|
87 | |
---|
88 | 'bmp|dib|rle' => 'Windows BMP image', |
---|
89 | 'pi?ct' => 'Macintosh PICT image', |
---|
90 | 'tiff?' => 'TIFF image', |
---|
91 | 'pdf' => 'PDF image', |
---|
92 | 'swf' => 'Shockwave Flash', |
---|
93 | |
---|
94 | 'avi' => 'Microsoft Video', |
---|
95 | 'moo?v|qt' => 'QuickTime Video', |
---|
96 | 'm(p(e?gv?|e|v)|1v)' => 'MPEG Video', |
---|
97 | 'mp(v2|2v)' => 'MPEG2 Video', |
---|
98 | |
---|
99 | 'midi?|kar|smf|rmi|mff' => 'MIDI Audio', |
---|
100 | 'wav' => 'WAVE Audio', |
---|
101 | 'au|snd' => 'ULAW Audio', |
---|
102 | 'mp(e?ga|2|a|3)|abs' => 'MPEG Audio', |
---|
103 | |
---|
104 | 'zip' => 'ZIP Compress', |
---|
105 | 'lzh' => 'LZH Compress', |
---|
106 | 'cab' => 'CAB Compress', |
---|
107 | |
---|
108 | 'd?html?' => 'HTML', |
---|
109 | 'rtf|rtx' => 'RichText', |
---|
110 | 'txt|text' => 'Text', |
---|
111 | |
---|
112 | '' |
---|
113 | ); |
---|
114 | |
---|
115 | |
---|
116 | # sjis or euc |
---|
117 | my $CHARCODE = 'sjis'; |
---|
118 | |
---|
119 | $TRANS_2BYTE_CODE = 0; |
---|
120 | |
---|
121 | ############################################################################## |
---|
122 | # Summary |
---|
123 | # |
---|
124 | # Form Read input |
---|
125 | # |
---|
126 | # Parameters |
---|
127 | # Returns |
---|
128 | # Memo |
---|
129 | ############################################################################## |
---|
130 | sub read_input |
---|
131 | { |
---|
132 | eval("use File::Copy;"); |
---|
133 | eval("use File::Path;"); |
---|
134 | |
---|
135 | my ($FORM) = @_; |
---|
136 | |
---|
137 | if (defined $CHMOD_ON_FOLDER_CREATE && !$CHMOD_ON_FOLDER_CREATE) { |
---|
138 | mkdir("$img_dir"); |
---|
139 | } |
---|
140 | else { |
---|
141 | umask(000); |
---|
142 | if (defined $CHMOD_ON_FOLDER_CREATE) { |
---|
143 | mkdir("$img_dir",$CHMOD_ON_FOLDER_CREATE); |
---|
144 | } |
---|
145 | else { |
---|
146 | mkdir("$img_dir",0777); |
---|
147 | } |
---|
148 | } |
---|
149 | |
---|
150 | undef $img_data_exists; |
---|
151 | undef @NEWFNAMES; |
---|
152 | undef @NEWFNAME_DATA; |
---|
153 | |
---|
154 | if($ENV{'CONTENT_LENGTH'} > 10000000 || $ENV{'CONTENT_LENGTH'} > $MAX_CONTENT_SIZE * 1024) { |
---|
155 | &upload_error( |
---|
156 | 'Size Error', |
---|
157 | sprintf( |
---|
158 | "Transmitting size is too large.MAX <strong>%d KB</strong> Now Size <strong>%d KB</strong>(<strong>%d bytes</strong> Over)", |
---|
159 | $MAX_CONTENT_SIZE, |
---|
160 | int($ENV{'CONTENT_LENGTH'} / 1024), |
---|
161 | $ENV{'CONTENT_LENGTH'} - $MAX_CONTENT_SIZE * 1024 |
---|
162 | ) |
---|
163 | ); |
---|
164 | } |
---|
165 | |
---|
166 | my $Buffer; |
---|
167 | if($ENV{'CONTENT_TYPE'} =~ /multipart\/form-data/) { |
---|
168 | # METHOD POST only |
---|
169 | return unless($ENV{'CONTENT_LENGTH'}); |
---|
170 | |
---|
171 | binmode(STDIN); |
---|
172 | # STDIN A pause character is detected.'(MacIE3.0 boundary of $ENV{'CONTENT_TYPE'} cannot be trusted.) |
---|
173 | my $Boundary = <STDIN>; |
---|
174 | $Boundary =~ s/\x0D\x0A//; |
---|
175 | $Boundary = quotemeta($Boundary); |
---|
176 | while(<STDIN>) { |
---|
177 | if(/^\s*Content-Disposition:/i) { |
---|
178 | my($name,$ContentType,$FileName); |
---|
179 | # form data get |
---|
180 | if(/\bname="([^"]+)"/i || /\bname=([^\s:;]+)/i) { |
---|
181 | $name = $1; |
---|
182 | $name =~ tr/+/ /; |
---|
183 | $name =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg; |
---|
184 | &Encode(\$name); |
---|
185 | } |
---|
186 | if(/\bfilename="([^"]*)"/i || /\bfilename=([^\s:;]*)/i) { |
---|
187 | $FileName = $1 || 'unknown'; |
---|
188 | } |
---|
189 | # head read |
---|
190 | while(<STDIN>) { |
---|
191 | last if(! /\w/); |
---|
192 | if(/^\s*Content-Type:\s*"([^"]+)"/i || /^\s*Content-Type:\s*([^\s:;]+)/i) { |
---|
193 | $ContentType = $1; |
---|
194 | } |
---|
195 | } |
---|
196 | # body read |
---|
197 | $value = ""; |
---|
198 | while(<STDIN>) { |
---|
199 | last if(/^$Boundary/o); |
---|
200 | $value .= $_; |
---|
201 | }; |
---|
202 | $lastline = $_; |
---|
203 | $value =~s /\x0D\x0A$//; |
---|
204 | if($value ne '') { |
---|
205 | if($FileName || $ContentType) { |
---|
206 | $img_data_exists = 1; |
---|
207 | ( |
---|
208 | $FileName, # |
---|
209 | $Ext, # |
---|
210 | $Length, # |
---|
211 | $ImageWidth, # |
---|
212 | $ImageHeight, # |
---|
213 | $ContentName # |
---|
214 | ) = &CheckContentType(\$value,$FileName,$ContentType); |
---|
215 | |
---|
216 | $FORM{$name} = $FileName; |
---|
217 | $new_fname = $FileName; |
---|
218 | push(@NEWFNAME_DATA,"$FileName\t$Ext\t$Length\t$ImageWidth\t$ImageHeight\t$ContentName"); |
---|
219 | |
---|
220 | # Multi-upload correspondence |
---|
221 | push(@NEWFNAMES,$new_fname); |
---|
222 | open(OUT,">$img_dir/$new_fname"); |
---|
223 | binmode(OUT); |
---|
224 | eval "flock(OUT,2);" if($PM{'flock'} == 1); |
---|
225 | print OUT $value; |
---|
226 | eval "flock(OUT,8);" if($PM{'flock'} == 1); |
---|
227 | close(OUT); |
---|
228 | |
---|
229 | } elsif($name) { |
---|
230 | $value =~ tr/+/ /; |
---|
231 | $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg; |
---|
232 | &Encode(\$value,'trans'); |
---|
233 | $FORM{$name} .= "\0" if(defined($FORM{$name})); |
---|
234 | $FORM{$name} .= $value; |
---|
235 | } |
---|
236 | } |
---|
237 | }; |
---|
238 | last if($lastline =~ /^$Boundary\-\-/o); |
---|
239 | } |
---|
240 | } elsif($ENV{'CONTENT_LENGTH'}) { |
---|
241 | read(STDIN,$Buffer,$ENV{'CONTENT_LENGTH'}); |
---|
242 | } |
---|
243 | foreach(split(/&/,$Buffer),split(/&/,$ENV{'QUERY_STRING'})) { |
---|
244 | my($name, $value) = split(/=/); |
---|
245 | $name =~ tr/+/ /; |
---|
246 | $name =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg; |
---|
247 | $value =~ tr/+/ /; |
---|
248 | $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg; |
---|
249 | |
---|
250 | &Encode(\$name); |
---|
251 | &Encode(\$value,'trans'); |
---|
252 | $FORM{$name} .= "\0" if(defined($FORM{$name})); |
---|
253 | $FORM{$name} .= $value; |
---|
254 | |
---|
255 | } |
---|
256 | |
---|
257 | } |
---|
258 | |
---|
259 | ############################################################################## |
---|
260 | # Summary |
---|
261 | # |
---|
262 | # CheckContentType |
---|
263 | # |
---|
264 | # Parameters |
---|
265 | # Returns |
---|
266 | # Memo |
---|
267 | ############################################################################## |
---|
268 | sub CheckContentType |
---|
269 | { |
---|
270 | |
---|
271 | my($DATA,$FileName,$ContentType) = @_; |
---|
272 | my($Ext,$ImageWidth,$ImageHeight,$ContentName,$Infomation); |
---|
273 | my $DataLength = length($$DATA); |
---|
274 | |
---|
275 | # An unknown file type |
---|
276 | |
---|
277 | $_ = $ContentType; |
---|
278 | my $UnknownType = ( |
---|
279 | !$_ |
---|
280 | || /^application\/(x-)?macbinary$/i |
---|
281 | || /^application\/applefile$/i |
---|
282 | || /^application\/octet-stream$/i |
---|
283 | || /^text\/plane$/i |
---|
284 | || /^x-unknown-content-type/i |
---|
285 | ); |
---|
286 | |
---|
287 | # MacBinary(Mac Unnecessary data are deleted.) |
---|
288 | if($UnknownType || $ENV{'HTTP_USER_AGENT'} =~ /Macintosh|Mac_/) { |
---|
289 | if($DataLength > 128 && !unpack("C",substr($$DATA,0,1)) && !unpack("C",substr($$DATA,74,1)) && !unpack("C",substr($$DATA,82,1)) ) { |
---|
290 | my $MacBinary_ForkLength = unpack("N", substr($$DATA, 83, 4)); # ForkLength Get |
---|
291 | my $MacBinary_FileName = quotemeta(substr($$DATA, 2, unpack("C",substr($$DATA, 1, 1)))); |
---|
292 | if($MacBinary_FileName && $MacBinary_ForkLength && $DataLength >= $MacBinary_ForkLength + 128 |
---|
293 | && ($FileName =~ /$MacBinary_FileName/i || substr($$DATA,102,4) eq 'mBIN')) { # DATA TOP 128byte MacBinary!! |
---|
294 | $$DATA = substr($$DATA,128,$MacBinary_ForkLength); |
---|
295 | my $ResourceLength = $DataLength - $MacBinary_ForkLength - 128; |
---|
296 | $DataLength = $MacBinary_ForkLength; |
---|
297 | } |
---|
298 | } |
---|
299 | } |
---|
300 | |
---|
301 | # A file name is changed into EUC. |
---|
302 | # &jcode::convert(\$FileName,'euc',$FormCodeDefault); |
---|
303 | # &jcode::h2z_euc(\$FileName); |
---|
304 | $FileName =~ s/^.*\\//; # Windows, Mac |
---|
305 | $FileName =~ s/^.*\///; # UNIX |
---|
306 | $FileName =~ s/&/&/g; |
---|
307 | $FileName =~ s/"/"/g; |
---|
308 | $FileName =~ s/</</g; |
---|
309 | $FileName =~ s/>/>/g; |
---|
310 | # |
---|
311 | # if($CHARCODE ne 'euc') { |
---|
312 | # &jcode::convert(\$FileName,$CHARCODE,'euc'); |
---|
313 | # } |
---|
314 | |
---|
315 | # An extension is extracted and it changes into a small letter. |
---|
316 | my $FileExt; |
---|
317 | if($FileName =~ /\.(\w+)$/) { |
---|
318 | $FileExt = $1; |
---|
319 | $FileExt =~ tr/A-Z/a-z/; |
---|
320 | } |
---|
321 | |
---|
322 | # Executable file detection (ban on upload) |
---|
323 | if($$DATA =~ /^MZ/) { |
---|
324 | $Ext = 'exe'; |
---|
325 | } |
---|
326 | # text |
---|
327 | if(!$Ext && ($UnknownType || $ContentType =~ /^text\//i || $ContentType =~ /^application\/(?:rtf|richtext)$/i || $ContentType =~ /^image\/x-xbitmap$/i) |
---|
328 | && ! $$DATA =~ /[\000-\006\177\377]/) { |
---|
329 | # $$DATA =~ s/\x0D\x0A/\n/g; |
---|
330 | # $$DATA =~ tr/\x0D\x0A/\n\n/; |
---|
331 | # |
---|
332 | # if( |
---|
333 | # $$DATA =~ /<\s*SCRIPT(?:.|\n)*?>/i |
---|
334 | # || $$DATA =~ /<\s*(?:.|\n)*?\bONLOAD\s*=(?:.|\n)*?>/i |
---|
335 | # || $$DATA =~ /<\s*(?:.|\n)*?\bONCLICK\s*=(?:.|\n)*?>/i |
---|
336 | # ) { |
---|
337 | # $Infomation = '(JavaScript contains)'; |
---|
338 | # } |
---|
339 | # if($$DATA =~ /<\s*TABLE(?:.|\n)*?>/i |
---|
340 | # || $$DATA =~ /<\s*BLINK(?:.|\n)*?>/i |
---|
341 | # || $$DATA =~ /<\s*MARQUEE(?:.|\n)*?>/i |
---|
342 | # || $$DATA =~ /<\s*OBJECT(?:.|\n)*?>/i |
---|
343 | # || $$DATA =~ /<\s*EMBED(?:.|\n)*?>/i |
---|
344 | # || $$DATA =~ /<\s*FRAME(?:.|\n)*?>/i |
---|
345 | # || $$DATA =~ /<\s*APPLET(?:.|\n)*?>/i |
---|
346 | # || $$DATA =~ /<\s*FORM(?:.|\n)*?>/i |
---|
347 | # || $$DATA =~ /<\s*(?:.|\n)*?\bSRC\s*=(?:.|\n)*?>/i |
---|
348 | # || $$DATA =~ /<\s*(?:.|\n)*?\bDYNSRC\s*=(?:.|\n)*?>/i |
---|
349 | # ) { |
---|
350 | # $Infomation = '(the HTML tag which is not safe is included)'; |
---|
351 | # } |
---|
352 | |
---|
353 | if($FileExt =~ /^txt$/i || $FileExt =~ /^cgi$/i || $FileExt =~ /^pl$/i) { # Text File |
---|
354 | $Ext = 'txt'; |
---|
355 | } elsif($ContentType =~ /^text\/html$/i || $FileExt =~ /html?/i || $$DATA =~ /<\s*HTML(?:.|\n)*?>/i) { # HTML File |
---|
356 | $Ext = 'html'; |
---|
357 | } elsif($ContentType =~ /^image\/x-xbitmap$/i || $FileExt =~ /^xbm$/i) { # XBM(x-BitMap) Image |
---|
358 | my $XbmName = $1; |
---|
359 | my ($XbmWidth, $XbmHeight); |
---|
360 | if($$DATA =~ /\#define\s*$XbmName\_width\s*(\d+)/i) { |
---|
361 | $XbmWidth = $1; |
---|
362 | } |
---|
363 | if($$DATA =~ /\#define\s*$XbmName\_height\s*(\d+)/i) { |
---|
364 | $XbmHeight = $1; |
---|
365 | } |
---|
366 | if($XbmWidth && $XbmHeight) { |
---|
367 | $Ext = 'xbm'; |
---|
368 | $ImageWidth = $XbmWidth; |
---|
369 | $ImageHeight = $XbmHeight; |
---|
370 | } |
---|
371 | } else { # |
---|
372 | $Ext = 'txt'; |
---|
373 | } |
---|
374 | } |
---|
375 | |
---|
376 | # image |
---|
377 | if(!$Ext && ($UnknownType || $ContentType =~ /^image\//i)) { |
---|
378 | # PNG |
---|
379 | if($$DATA =~ /^\x89PNG\x0D\x0A\x1A\x0A/) { |
---|
380 | if(substr($$DATA, 12, 4) eq 'IHDR') { |
---|
381 | $Ext = 'png'; |
---|
382 | ($ImageWidth, $ImageHeight) = unpack("N2", substr($$DATA, 16, 8)); |
---|
383 | } |
---|
384 | } elsif($$DATA =~ /^GIF8(?:9|7)a/) { # GIF89a(modified), GIF89a, GIF87a |
---|
385 | $Ext = 'gif'; |
---|
386 | ($ImageWidth, $ImageHeight) = unpack("v2", substr($$DATA, 6, 4)); |
---|
387 | } elsif($$DATA =~ /^II\x2a\x00\x08\x00\x00\x00/ || $$DATA =~ /^MM\x00\x2a\x00\x00\x00\x08/) { # TIFF |
---|
388 | $Ext = 'tif'; |
---|
389 | } elsif($$DATA =~ /^BM/) { # BMP |
---|
390 | $Ext = 'bmp'; |
---|
391 | } elsif($$DATA =~ /^\xFF\xD8\xFF/ || $$DATA =~ /JFIF/) { # JPEG |
---|
392 | my $HeaderPoint = index($$DATA, "\xFF\xD8\xFF", 0); |
---|
393 | my $Point = $HeaderPoint + 2; |
---|
394 | while($Point < $DataLength) { |
---|
395 | my($Maker, $MakerType, $MakerLength) = unpack("C2n",substr($$DATA,$Point,4)); |
---|
396 | if($Maker != 0xFF || $MakerType == 0xd9 || $MakerType == 0xda) { |
---|
397 | last; |
---|
398 | } elsif($MakerType >= 0xC0 && $MakerType <= 0xC3) { |
---|
399 | $Ext = 'jpg'; |
---|
400 | ($ImageHeight, $ImageWidth) = unpack("n2", substr($$DATA, $Point + 5, 4)); |
---|
401 | if($HeaderPoint > 0) { |
---|
402 | $$DATA = substr($$DATA, $HeaderPoint); |
---|
403 | $DataLength = length($$DATA); |
---|
404 | } |
---|
405 | last; |
---|
406 | } else { |
---|
407 | $Point += $MakerLength + 2; |
---|
408 | } |
---|
409 | } |
---|
410 | } |
---|
411 | } |
---|
412 | |
---|
413 | # audio |
---|
414 | if(!$Ext && ($UnknownType || $ContentType =~ /^audio\//i)) { |
---|
415 | # MIDI Audio |
---|
416 | if($$DATA =~ /^MThd/) { |
---|
417 | $Ext = 'mid'; |
---|
418 | } elsif($$DATA =~ /^\x2esnd/) { # ULAW Audio |
---|
419 | $Ext = 'au'; |
---|
420 | } elsif($$DATA =~ /^RIFF/ || $$DATA =~ /^ID3/ && $$DATA =~ /RIFF/) { |
---|
421 | my $HeaderPoint = index($$DATA, "RIFF", 0); |
---|
422 | $_ = substr($$DATA, $HeaderPoint + 8, 8); |
---|
423 | if(/^WAVEfmt $/) { |
---|
424 | # WAVE |
---|
425 | if(unpack("V",substr($$DATA, $HeaderPoint + 16, 4)) == 16) { |
---|
426 | $Ext = 'wav'; |
---|
427 | } else { # RIFF WAVE MP3 |
---|
428 | $Ext = 'mp3'; |
---|
429 | } |
---|
430 | } elsif(/^RMIDdata$/) { # RIFF MIDI |
---|
431 | $Ext = 'rmi'; |
---|
432 | } elsif(/^RMP3data$/) { # RIFF MP3 |
---|
433 | $Ext = 'rmp'; |
---|
434 | } |
---|
435 | if($ContentType =~ /^audio\//i) { |
---|
436 | $Infomation .= '(RIFF '. substr($$DATA, $HeaderPoint + 8, 4). ')'; |
---|
437 | } |
---|
438 | } |
---|
439 | } |
---|
440 | |
---|
441 | # a binary file |
---|
442 | unless ($Ext) { |
---|
443 | # PDF image |
---|
444 | if($$DATA =~ /^\%PDF/) { |
---|
445 | # Picture size is not measured. |
---|
446 | $Ext = 'pdf'; |
---|
447 | } elsif($$DATA =~ /^FWS/) { # Shockwave Flash |
---|
448 | $Ext = 'swf'; |
---|
449 | } elsif($$DATA =~ /^RIFF/ || $$DATA =~ /^ID3/ && $$DATA =~ /RIFF/) { |
---|
450 | my $HeaderPoint = index($$DATA, "RIFF", 0); |
---|
451 | $_ = substr($$DATA,$HeaderPoint + 8, 8); |
---|
452 | # AVI |
---|
453 | if(/^AVI LIST$/) { |
---|
454 | $Ext = 'avi'; |
---|
455 | } |
---|
456 | if($ContentType =~ /^video\//i) { |
---|
457 | $Infomation .= '(RIFF '. substr($$DATA, $HeaderPoint + 8, 4). ')'; |
---|
458 | } |
---|
459 | } elsif($$DATA =~ /^PK/) { # ZIP Compress File |
---|
460 | $Ext = 'zip'; |
---|
461 | } elsif($$DATA =~ /^MSCF/) { # CAB Compress File |
---|
462 | $Ext = 'cab'; |
---|
463 | } elsif($$DATA =~ /^Rar\!/) { # RAR Compress File |
---|
464 | $Ext = 'rar'; |
---|
465 | } elsif(substr($$DATA, 2, 5) =~ /^\-lh(\d+|d)\-$/) { # LHA Compress File |
---|
466 | $Infomation .= "(lh$1)"; |
---|
467 | $Ext = 'lzh'; |
---|
468 | } elsif(substr($$DATA, 325, 25) eq "Apple Video Media Handler" || substr($$DATA, 325, 30) eq "Apple \x83\x72\x83\x66\x83\x49\x81\x45\x83\x81\x83\x66\x83\x42\x83\x41\x83\x6E\x83\x93\x83\x68\x83\x89") { |
---|
469 | # QuickTime |
---|
470 | $Ext = 'mov'; |
---|
471 | } |
---|
472 | } |
---|
473 | |
---|
474 | # Header analysis failure |
---|
475 | unless ($Ext) { |
---|
476 | # It will be followed if it applies for the MIME type from the browser. |
---|
477 | foreach (keys %UPLOAD_CONTENT_TYPE_LIST) { |
---|
478 | next unless ($_); |
---|
479 | if($ContentType =~ /^$_$/i) { |
---|
480 | $Ext = $UPLOAD_CONTENT_TYPE_LIST{$_}; |
---|
481 | $ContentName = &CheckContentExt($Ext); |
---|
482 | if( |
---|
483 | grep {$_ eq $Ext;} ( |
---|
484 | 'png', |
---|
485 | 'gif', |
---|
486 | 'jpg', |
---|
487 | 'xbm', |
---|
488 | 'tif', |
---|
489 | 'bmp', |
---|
490 | 'pdf', |
---|
491 | 'swf', |
---|
492 | 'mov', |
---|
493 | 'zip', |
---|
494 | 'cab', |
---|
495 | 'lzh', |
---|
496 | 'rar', |
---|
497 | 'mid', |
---|
498 | 'rmi', |
---|
499 | 'au', |
---|
500 | 'wav', |
---|
501 | 'avi', |
---|
502 | 'exe' |
---|
503 | ) |
---|
504 | ) { |
---|
505 | $Infomation .= ' / Header analysis failure'; |
---|
506 | } |
---|
507 | if($Ext ne $FileExt && &CheckContentExt($FileExt) eq $ContentName) { |
---|
508 | $Ext = $FileExt; |
---|
509 | } |
---|
510 | last; |
---|
511 | } |
---|
512 | } |
---|
513 | # a MIME type is unknown--It judges from an extension. |
---|
514 | unless ($Ext) { |
---|
515 | $ContentName = &CheckContentExt($FileExt); |
---|
516 | if($ContentName) { |
---|
517 | $Ext = $FileExt; |
---|
518 | $Infomation .= ' / MIME type is unknown('. $ContentType. ')'; |
---|
519 | last; |
---|
520 | } |
---|
521 | } |
---|
522 | } |
---|
523 | |
---|
524 | # $ContentName = &CheckContentExt($Ext) unless($ContentName); |
---|
525 | # if($Ext && $ContentName) { |
---|
526 | # $ContentName .= $Infomation; |
---|
527 | # } else { |
---|
528 | # &upload_error( |
---|
529 | # 'Extension Error', |
---|
530 | # "$FileName A not corresponding extension ($Ext)<BR>The extension which can be responded ". join(',', sort values(%UPLOAD_EXT_LIST)) |
---|
531 | # ); |
---|
532 | # } |
---|
533 | |
---|
534 | # # SSI Tag Deletion |
---|
535 | # if($Ext =~ /.?html?/ && $$DATA =~ /<\!/) { |
---|
536 | # foreach ( |
---|
537 | # 'config', |
---|
538 | # 'echo', |
---|
539 | # 'exec', |
---|
540 | # 'flastmod', |
---|
541 | # 'fsize', |
---|
542 | # 'include' |
---|
543 | # ) { |
---|
544 | # $$DATA =~ s/\#\s*$_/\&\#35\;$_/ig |
---|
545 | # } |
---|
546 | # } |
---|
547 | |
---|
548 | return ( |
---|
549 | $FileName, |
---|
550 | $Ext, |
---|
551 | int($DataLength / 1024 + 1), |
---|
552 | $ImageWidth, |
---|
553 | $ImageHeight, |
---|
554 | $ContentName |
---|
555 | ); |
---|
556 | } |
---|
557 | |
---|
558 | ############################################################################## |
---|
559 | # Summary |
---|
560 | # |
---|
561 | # Extension discernment |
---|
562 | # |
---|
563 | # Parameters |
---|
564 | # Returns |
---|
565 | # Memo |
---|
566 | ############################################################################## |
---|
567 | |
---|
568 | sub CheckContentExt |
---|
569 | { |
---|
570 | |
---|
571 | my($Ext) = @_; |
---|
572 | my $ContentName; |
---|
573 | foreach (keys %UPLOAD_EXT_LIST) { |
---|
574 | next unless ($_); |
---|
575 | if($_ && $Ext =~ /^$_$/) { |
---|
576 | $ContentName = $UPLOAD_EXT_LIST{$_}; |
---|
577 | last; |
---|
578 | } |
---|
579 | } |
---|
580 | return $ContentName; |
---|
581 | |
---|
582 | } |
---|
583 | |
---|
584 | ############################################################################## |
---|
585 | # Summary |
---|
586 | # |
---|
587 | # Form decode |
---|
588 | # |
---|
589 | # Parameters |
---|
590 | # Returns |
---|
591 | # Memo |
---|
592 | ############################################################################## |
---|
593 | sub Encode |
---|
594 | { |
---|
595 | |
---|
596 | my($value,$Trans) = @_; |
---|
597 | |
---|
598 | # my $FormCode = &jcode::getcode($value) || $FormCodeDefault; |
---|
599 | # $FormCodeDefault ||= $FormCode; |
---|
600 | # |
---|
601 | # if($Trans && $TRANS_2BYTE_CODE) { |
---|
602 | # if($FormCode ne 'euc') { |
---|
603 | # &jcode::convert($value, 'euc', $FormCode); |
---|
604 | # } |
---|
605 | # &jcode::tr( |
---|
606 | # $value, |
---|
607 | # "\xA3\xB0-\xA3\xB9\xA3\xC1-\xA3\xDA\xA3\xE1-\xA3\xFA", |
---|
608 | # '0-9A-Za-z' |
---|
609 | # ); |
---|
610 | # if($CHARCODE ne 'euc') { |
---|
611 | # &jcode::convert($value,$CHARCODE,'euc'); |
---|
612 | # } |
---|
613 | # } else { |
---|
614 | # if($CHARCODE ne $FormCode) { |
---|
615 | # &jcode::convert($value,$CHARCODE,$FormCode); |
---|
616 | # } |
---|
617 | # } |
---|
618 | # if($CHARCODE eq 'euc') { |
---|
619 | # &jcode::h2z_euc($value); |
---|
620 | # } elsif($CHARCODE eq 'sjis') { |
---|
621 | # &jcode::h2z_sjis($value); |
---|
622 | # } |
---|
623 | |
---|
624 | } |
---|
625 | |
---|
626 | ############################################################################## |
---|
627 | # Summary |
---|
628 | # |
---|
629 | # Error Msg |
---|
630 | # |
---|
631 | # Parameters |
---|
632 | # Returns |
---|
633 | # Memo |
---|
634 | ############################################################################## |
---|
635 | |
---|
636 | sub upload_error |
---|
637 | { |
---|
638 | |
---|
639 | local($error_message) = $_[0]; |
---|
640 | local($error_message2) = $_[1]; |
---|
641 | |
---|
642 | print "Content-type: text/html\n\n"; |
---|
643 | print<<EOF; |
---|
644 | <HTML> |
---|
645 | <HEAD> |
---|
646 | <TITLE>Error Message</TITLE></HEAD> |
---|
647 | <BODY> |
---|
648 | <table border="1" cellspacing="10" cellpadding="10"> |
---|
649 | <TR bgcolor="#0000B0"> |
---|
650 | <TD bgcolor="#0000B0" NOWRAP><font size="-1" color="white"><B>Error Message</B></font></TD> |
---|
651 | </TR> |
---|
652 | </table> |
---|
653 | <UL> |
---|
654 | <H4> $error_message </H4> |
---|
655 | $error_message2 <BR> |
---|
656 | </UL> |
---|
657 | </BODY> |
---|
658 | </HTML> |
---|
659 | EOF |
---|
660 | &rm_tmp_uploaded_files; # Image Temporary deletion |
---|
661 | exit; |
---|
662 | } |
---|
663 | |
---|
664 | ############################################################################## |
---|
665 | # Summary |
---|
666 | # |
---|
667 | # Image Temporary deletion |
---|
668 | # |
---|
669 | # Parameters |
---|
670 | # Returns |
---|
671 | # Memo |
---|
672 | ############################################################################## |
---|
673 | |
---|
674 | sub rm_tmp_uploaded_files |
---|
675 | { |
---|
676 | if($img_data_exists == 1){ |
---|
677 | sleep 1; |
---|
678 | foreach $fname_list(@NEWFNAMES) { |
---|
679 | if(-e "$img_dir/$fname_list") { |
---|
680 | unlink("$img_dir/$fname_list"); |
---|
681 | } |
---|
682 | } |
---|
683 | } |
---|
684 | |
---|
685 | } |
---|
686 | 1; |
---|