source: extensions/url_uploader/include/ws_functions.inc.php @ 21919

<?php
defined('URLUPLOADER_PATH') or die('Hacking attempt!');

function urluploader_ws_add_methods($arr)
{
  global $conf;
  $service = &$arr[0];
  
  $service->addMethod(
    'pwg.images.addRemote',
    'ws_images_addRemote',
    array(
      'file_url' => array(),
      'category' => array(),
      'name' => array('default' => null),
      'level' => array(
        'default' => 0,
        'maxValue' => $conf['available_permission_levels']
        ),
      'url_in_comment' => array('default' => true),
      ),
    'Add image from remote URL.'
    );
}

function ws_images_addRemote($params, &$service)
{
  global $conf;
  
  if (!is_admin())
  {
    return new PwgError(401, 'Access denied');
  }
  
  $params = array_map('trim', $params);
  
  $allowed_extensions = array('jpg','jpeg','png','gif');
  $allowed_mimes = array('image/jpeg', 'image/png', 'image/gif');
  
  // check empty url
  if (empty($params['file_url']))
  {
    return new PwgError(WS_ERR_INVALID_PARAM, 'File URL is empty');
  }
  // check remote url
  if (!url_is_remote($params['file_url']))
  {
    return new PwgError(WS_ERR_INVALID_PARAM, 'Invalid file URL');
  }
  // check file extension
  if (!in_array(strtolower(get_extension($params['file_url'])), $allowed_extensions))
  {
    return new PwgError(WS_ERR_INVALID_PARAM, 'Invalid file type');
  }

  // download file
  include_once(PHPWG_ROOT_PATH.'admin/include/functions.php');
  
  $temp_filename = $conf['data_location'].basename($params['file_url']);
  $file = fopen($temp_filename, 'w+');
  $result = fetchRemote($params['file_url'], $file);
  fclose($file);
  
  // download failed ?
  if (!$result)
  {
    @unlink($temp_filename);
    return new PwgError(WS_ERR_INVALID_PARAM, 'Unable to download file');
  }
  // check mime-type
  if (!in_array(get_mime($temp_filename, $allowed_mimes[0]), $allowed_mimes))
  {
    @unlink($temp_filename);
    return new PwgError(WS_ERR_INVALID_PARAM, 'Invalid file type');
  }

  // add photo
  include_once(PHPWG_ROOT_PATH.'admin/include/functions_upload.inc.php');
  
  $image_id = add_uploaded_file(
    $temp_filename, 
    basename($temp_filename), 
    array($params['category']), 
    $params['level']
    );
  
  $updates = array();
  if (!empty($params['name']))
  {
    $updates['name'] = $params['name'];
  }
  if ($params['url_in_comment']=='true')
  {
    $url = parse_url($params['file_url']);
    $url = $url['scheme'].'://'.$url['host'];
    $updates['comment'] = '<a href="'. $url . '">'. $url .'</a>';
  }
  
  single_update(
    IMAGES_TABLE,
    $updates,
    array('id' => $image_id)
    );
  
  
  // return infos
  $query = '
SELECT id, name, permalink
  FROM '.CATEGORIES_TABLE.'
  WHERE id = '.$params['category'].'
;';
  $category = pwg_db_fetch_assoc(pwg_query($query));

  $url_params = array(
    'image_id' => $image_id,
    'section' => 'categories',
    'category' => $category,
    );
    
  $query = '
SELECT id, path
  FROM '.IMAGES_TABLE.'
  WHERE id = '.$image_id.'
;';
  $image_infos = pwg_db_fetch_assoc(pwg_query($query));

  return array(
    'image_id' => $image_id,
    'url' => make_picture_url($url_params),
    'thumbnail_url' => preg_replace('#^'.PHPWG_ROOT_PATH.'#', './', DerivativeImage::thumb_url($image_infos)),
    );
}

?>